last executing test programs: 7m18.453521473s ago: executing program 4 (id=4056): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002e40)=[{&(0x7f0000000440)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)="8e", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="2c0000008458b3d9670000004000010010000080fe00f21416d275e31bc8c6000006000000070000", @ANYRES32=0x0, @ANYBLOB="2c000000840000000100000008008100080000000000010000000000a26100000600000005000000", @ANYRES32=0x0, @ANYBLOB="14000000840000000500000000000000018000001000000084000000070000006401010014000000840000000000000001001f0008000008140000008400000000000000677403002b00001014"], 0xb8}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x2, 0xe, 0x420, 0xb8}, 0x8) 7m17.751866812s ago: executing program 4 (id=4061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x143c00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) read(r1, &(0x7f0000001140)=""/4096, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x29, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc01c586b, &(0x7f0000000200)={r2, &(0x7f00000000c0)='\x00', 0x41, &(0x7f0000000140)={@align=0x2, {0x1, 0xe5e, 0x9, 0x6}}, 0xffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x8}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x6, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x80) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000300)={{0x80000000, 0x0, 0x1, [0x174481c6, 0x95d]}, {0x80000000, 0x0, 0x2, [0x4b, 0x9399]}, 0x2, [0x174, 0x101]}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x143c00) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) (async) read(r1, &(0x7f0000001140)=""/4096, 0x48) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$kcm(0x29, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc01c586b, &(0x7f0000000200)={r2, &(0x7f00000000c0)='\x00', 0x41, &(0x7f0000000140)={@align=0x2, {0x1, 0xe5e, 0x9, 0x6}}, 0xffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x8}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x6, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x5, 0x80) (async) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000300)={{0x80000000, 0x0, 0x1, [0x174481c6, 0x95d]}, {0x80000000, 0x0, 0x2, [0x4b, 0x9399]}, 0x2, [0x174, 0x101]}) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000340)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) (async) 7m17.335090404s ago: executing program 4 (id=4063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0x0, 0x700}, 0x20008802) 7m16.49519591s ago: executing program 4 (id=4074): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r3 = epoll_create(0x10000) syz_usb_connect$uac2(0x0, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100312460008732b0a004000f401030109029f000301030040080b0002010720060904000000010120000924010e00013f000308240a05030804000f24060605050003000216040000000c240302ff010306"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x9000000d}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000080)=[{0x800000000}, {0x1000000004, 0x6, 0x7}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x6e}) 7m15.099574549s ago: executing program 4 (id=4087): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x1a7, &(0x7f00000000c0)={0x0, 0x62ac, 0x1, 0x800003, 0x50}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x2000001, 0x1, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) landlock_restrict_self(r5, 0xe) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010008000007000000000a"], 0x24}}, 0x0) 7m14.166945302s ago: executing program 4 (id=4091): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x900, &(0x7f0000000a80)={0x0, 0xf5, 0x40000}, 0x20) (fail_nth: 2) 7m13.56830978s ago: executing program 32 (id=4091): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x900, &(0x7f0000000a80)={0x0, 0xf5, 0x40000}, 0x20) (fail_nth: 2) 19.902088322s ago: executing program 2 (id=6229): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x4280286) (async) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 19.018860212s ago: executing program 1 (id=6234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x126, 0x0, &(0x7f0000000600)="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", 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0}, 0x4c) 18.426798457s ago: executing program 1 (id=6237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000006000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 17.9757859s ago: executing program 2 (id=6239): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x3800001, 0x401d031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) syz_open_dev$dvb_demux(0x0, 0x0, 0x700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000200000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000ac0000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 17.496535806s ago: executing program 1 (id=6241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000680)) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303000b24060305", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) fchdir(r2) close(r2) r3 = openat$dir(0xffffff9c, &(0x7f0000000380)='./file0\x00', 0x280, 0x10) faccessat(r3, &(0x7f00000003c0)='./file1\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f00000006c0)={0xc3, 0x0, 0x10002}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f0000000700)={0x0, r4}) chroot(&(0x7f0000000100)='./file0\x00') r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000040)={0xbe4, 0x3ff}) write$nbd(r5, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect$midi(0x4, 0xd0, &(0x7f0000000140)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x1, 0x1, 0x1, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x45, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xc, 0x1, [{0x1, 0x80}], 0xf7}], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0xf7, 0xf8, 0x40, {0xa, 0x25, 0x1, 0x6, "487c92775ca0"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x3, 0x9, {0x12, 0x25, 0x1, 0xe, "39eedb68b1e8c967e9556bc58e4b"}}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x2, 0x9, 0x0, {0xd, 0x25, 0x1, 0x9, "9426b3b3938d693802"}}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x3, 0x8, {0xd, 0x25, 0x1, 0x9, "ee243e9c76c6887b26"}}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x3, 0x6, 0xe, {0x6, 0x25, 0x1, 0x2, 'HW'}}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xd, 0x8, 0x1, {0x10, 0x25, 0x1, 0xc, "21339e67c44234fa15d87124"}}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xcb, 0x2, 0xb4, {0x6, 0x25, 0x1, 0x2, "29f5"}}}, {{0x9, 0x5, 0x8, 0x8, 0x5a7, 0x3, 0x8, 0x9, {0x9, 0x25, 0x1, 0x5, "cc67f26f10"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x350, 0xff, 0xf5, 0x7, 0x40, 0x7}, 0xa1, &(0x7f0000000740)={0x5, 0xf, 0xa1, 0x5, [@generic={0x49, 0x10, 0x1, "9c496142a4682d80822138eb102c9b04aa86c292fb2b9e93a8e13f11ff761a0b9b3ca5e2a9e375329701331a9ff0b33f20e320df10f03ee66955601b8682718eb0931ad5af55"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0x8, 0xf, 0x40, [0x1fe60f8, 0xc0, 0x3f0f, 0xc030, 0x0, 0x3f00]}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5, 0x0, 0x0, [0xff3fc0, 0xff3f3f, 0xff3fc0, 0x3f30]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x9, 0xff0f, 0x8, [0x3ff0]}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x8f}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x406}}, {0xad, &(0x7f0000000480)=@string={0xad, 0x3, "977e28088292d2261ddb959d45baac194904d2ab74ab452f8abd4ec4ae00c72ad80ca200369c8ec8c2e96fd2ea49373f51b533b81a68a18c94496e0601066fa780bc78d07ff113a4830115cc0d4456dfe7607f1f0d77ef5f4277dc5b7dd1100912333b5381ed3c68682a647cd16a485d045e57a6a054ff17ad0ffb7062527106064f06f636942ccb1ac7dba5878dc54c9706b7f10dc803f66b787ec4624d3089377521e4f2b778c30778ae"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x404}}, {0x27, &(0x7f0000000580)=@string={0x27, 0x3, "b50769e708ded31c07856020bd9a6b1d2d1cd2269373bfaf079fdde73f30d8513b047bef0f"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) fspick(r2, &(0x7f0000000400)='./file1\x00', 0x1) syz_open_dev$dri(0x0, 0x0, 0x0) 15.982546373s ago: executing program 2 (id=6244): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r7 = io_uring_setup(0x206e, &(0x7f0000002380)={0x0, 0x80023f8, 0x40}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r7, 0x1a, &(0x7f0000000100)={0x5}, 0x1) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000180)=0x7) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000300)=0x4) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20c594c570b8cd54a37b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r10, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r10, &(0x7f0000000340), 0x2000011a) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000106307012040000102030109026f0003010300050904000000010100000a240100000a0002010209040100000102000009040101010102000009050109080002fc0a072501000e060009ffffffff0102000009040201010102000008240201f9033c7f072401070402100905822940"], 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r9, 0x7af, &(0x7f00000000c0)={@hyper, 0x5}) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000040)=0x90000) 15.837638645s ago: executing program 5 (id=6245): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="10eba9fdb4cbab48929e1af151000000000000000000000000ffffff", 0x1c}], 0x1) 15.490172389s ago: executing program 5 (id=6246): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x900, &(0x7f0000000a80)={0x0, 0xf5, 0x40020}, 0x20) 15.366971107s ago: executing program 5 (id=6247): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x64, 0x30, 0x2, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x50, 0x96, 0x0, 0x0, @binary="6611c5ff80d2f2d6dcbf86885c539d93b9d9550be4b78ebf467871c533a227c18f95099e67d30421b00a6445b07f2af6e2d00a8e42227a6fcd5b343a80f357f34b2aaa38d2f8bb977cb19602"}]}, 0x64}}, 0x20040000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942034375886445000028002200000006"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x2bd}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) 13.227517425s ago: executing program 1 (id=6251): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x11, 0x4, 0x0, 0x3c, 0x70, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2]}, @lsrr={0x83, 0x1b, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @loopback, @remote]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1b0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x2, 0xc, 0x204, 0x3, 0xe}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x6, 0x0}, 0x3501, 0x4, 0x3, 0x2, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0xa}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x34000}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1290, &(0x7f0000003580)=ANY=[@ANYBLOB="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"/4752], 0x0) 12.966752781s ago: executing program 3 (id=6253): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000002c0)="10eba9fdb4cbab48929e1af1510000001f0000000000000000001b00", 0x1c}], 0x2) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xb, 0x3a, '\\x0\x01\xe29\x00\x00\x00\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r2, 0x0, 0x80000000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESOCT=r8], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.533327353s ago: executing program 0 (id=6254): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x80000404) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r1, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x808, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x810, 0x0}}], 0x34000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) r6 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x16000) ioctl$KDADDIO(r6, 0x4b34, 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x36, 0x2, 0x4, "3bd9e82ea206e410020000cf00e89a00000000268cd21806000000000000007e", 0xb5315258}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 11.675549834s ago: executing program 5 (id=6255): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_FLOW={0x8, 0xb, 0x9}]}, 0x24}}, 0xffffffff) 11.599230786s ago: executing program 0 (id=6256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x58000000, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000940)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xc, 0x0, 0x6, 0xf, 0x2, 'syz0\x00', "d6c3d40a46ee61eeab4ff960a633979e3a68462c850b751c5cbab83a2088bd7e", "751411b5fa8641db7046dfe90fc61aba5d5e34db1893e15ef78ef298c1e80d5c", [{0x5, 0x7, {0x0, 0xa07}}, {0x7, 0x0, {0x0, 0x4}}, {0xff, 0x7, {0x3, 0x7}}, {0x3a8, 0x8}, {0x9, 0x8, {0x3, 0x30}}, {0x68e, 0xa, {0x2, 0x4}}, {0xa430, 0xc0bc, {0x3, 0x3}}, {0x3, 0x3, {0x0, 0x6031}}, {0x3, 0x6, {0x1, 0x9}}, {0xe, 0x9, {0x2}}, {0x4, 0x3, {0x0, 0x80000001}}, {0x9, 0x8, {0x1, 0x9}}, {0xd, 0x1, {0x3, 0x4}}, {0x8, 0xfffd}, {0x3, 0x7, {0x0, 0x30}}, {0x9, 0x3, {0x0, 0x3}}, {0x7, 0x6, {0x3, 0x4}}, {0x4, 0x9, {0x3, 0x81}}, {0x8, 0xc740, {0x1, 0xffff}}, {0x6, 0x4, {0x3, 0x81}}, {0x5, 0x40, {0x0, 0x4}}, {0xe, 0x7, {0x2, 0x9}}, {0xffff, 0x8, {0x0, 0x9}}, {0x0, 0x0, {0x2, 0x2}}, {0x74, 0x9, {0x2, 0x3}}, {0x6, 0x2, {0x3, 0x200}}, {0x0, 0x651, {0x1, 0x3f4}}, {0x7, 0x100, {0x3, 0xe891}}, {0x5, 0x1000, {0x1, 0xfff}}, {0x80, 0xfffc, {0x3, 0x81}}, {0x0, 0xe87, {0x1, 0x7c9b}}, {0x8, 0x1, {0x2, 0x7}}, {0x3, 0x60, {0x3, 0x4}}, {0x9, 0x8, {0x1, 0x3}}, {0x40, 0x4, {0x2, 0x542}}, {0x4, 0x4, {0x0, 0x9}}, {0x3, 0x6, {0x2, 0x2}}, {0x100, 0x5, {0x0, 0x764d}}, {0x1, 0x8, {0x2, 0x5}}, {0x800, 0x3, {0x3, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x44) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000740)={0x58, 0x0, &(0x7f00000005c0)=[@exit_looper, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x1, 0x38}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/29, 0x1d, 0x2, 0xa}}, &(0x7f0000000480)={0x0, 0x1c, 0x34}}}, @dead_binder_done], 0x2f, 0x0, &(0x7f0000000640)="a9a333dcd55f8ae6628d6c28fb29ede80f8b2461e2d3f4a146fce6ce2a5b742a4895a07ddf7fc16e31c9e1e632fa3a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 11.308515539s ago: executing program 2 (id=6257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="cc0000001b00010028bd700000000000fe8000fd00000000000000000000009d4871bd020000000000000000000000000001000000000000000000eaec000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000001000000000000000000000000000000fdffffffffffffff0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000fd"], 0xcc}}, 0x0) 11.086940541s ago: executing program 2 (id=6258): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x1000}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000100)="157038215ae179a395182fcbdd947c61becb28f409a5b9a022ffadde456b6f0eef9ebdbf5348a43111a34501f1c4d700493d78e2bda635cc4b26557ad9538c8fa1061ed6d1c14d64369986e8731ea9397e372fe0a3", 0x55, 0xd}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xf, 0x1, 0x1000, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2c, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) dup(0xffffffffffffffff) 11.073857991s ago: executing program 3 (id=6259): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00100c07aa008000", "7a8e220000000000009e59f31000000004000000000b00000000000000000014", "e73400", "000000d900"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 10.794934505s ago: executing program 3 (id=6260): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3800000012005783fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000084002400140012800b000100000000000000000096b7040002803e51a7bb1d6efa43b4dd03266234ac8665ced4b3ff9034e391832a069aa31aae98"], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0xc4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x2b, 0x0, [0x5a, 0x0, 0x80000, 0xf, 0x10000, 0x0, 0x4, 0x0, 0x7, 0x0, 0x2, 0x90, 0x5, 0xd4f8, 0x39, 0x7]}], r4, 0x1, 0x1, 0x48}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x1) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x9, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xa, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x4, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xff, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xaa) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 10.778431916s ago: executing program 5 (id=6261): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e1faa0a04ff", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x1c, &(0x7f0000000040), &(0x7f0000cab000)=0x7) syz_usb_disconnect(r0) socket$key(0xf, 0x3, 0x2) socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r5, &(0x7f0000000180)='10000', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0), 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r10, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 10.682357445s ago: executing program 0 (id=6262): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.108535983s ago: executing program 0 (id=6263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000010000001000000000400", @ANYRES32=0x0, @ANYBLOB="00009965e1e6"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="620afcff0400370018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150006000000000007000000cc0ffff3bf01000000000000b702000004000000b7030000c7000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.030850129s ago: executing program 3 (id=6264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000000e000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000040900030073797a300000000014000480080002400000000008000140000000030900010073797a300000000050000000060a1d0400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}}, 0x10) 2.420048345s ago: executing program 2 (id=6265): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x5, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4e, 0x406, 0xb6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5a, 0x4, 0x7, 0xd, "549d0dd99728"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x3, 0x35, 0x9}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1, 0x7}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x3, 0x6, 0xf2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x5e, 0x80, {0x7, 0x25, 0x1, 0x4, 0x3, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xd, 0x4, 0x2d, 0x4, "35bcea", "aae259"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x10, 0x7, {0x7, 0x25, 0x1, 0xc, 0x3, 0x2bd}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x5, 0x1, 0x1, 0x8, 0xa0}, 0x61, &(0x7f0000000200)={0x5, 0xf, 0x61, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "80f759dc892337d0e7e03eb899ac6f7e"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x42, 0x10, 0x1, "5336e28a6f651bde227d8b8ce44dafeb2705012a55be86602c9561ce106a073e69c9053cd0a9b975a53f92370eef8375b99d6258ddddcf1d60b44bbee1d657"}]}, 0x6, [{0xaa, &(0x7f0000000300)=@string={0xaa, 0x3, "56121f89618e6a973ad80b3a60a346a76ec31f26e2845a2f21ac6bf2856aaab012bc5582c2c79da7245cfc3159b303abea634be9014432a4e9584f5ff76c50454e91ca41058ef368037fb0350e6270ff5669396be7b87c6fac108e72aabe8f46703dab3cf89d9eb4c12e9161be482a87e92855c332c62f134cffc18c00de49da73ffef15ee37c6e19a01229680c2e828f3c76c0ab7fef0ef2de3309f6341b26ef4c0e703d9f98271"}}, {0x8a, &(0x7f00000004c0)=@string={0x8a, 0x3, "da4fa9622a73a8b783d668788385bdc91cd75eed6c7b72a626bdbade560f7954dd5a6339fd6ab3dee30b337fdd1e196d9f5ceeb0eee0b76c9b702c883205520a692a3d474788a7f826a461c97010b5c84f20c65630f4c73e17a12f3c029157ce2fd0db1c518abff380031646d4bb6b11edae4694cbdffc31b1644119033aaf36fd2286db0b026445"}}, {0x4f, &(0x7f0000001980)=ANY=[@ANYBLOB="4f03159ad0398b63e3b82f282910cfc3dd9587d87d7eebba71e926805e446bb22f832c838428297f08df08abe0e3027cc04a0e41d12e110f8c478a929d7761711d125bfbaa1a7ee772f66bb46d141f6476e8a57ea4ad1bd033a10b20aad7a6dd820250c821a9d7be5c597efc03695ab2b172b31127565683b0d5b1a4c1e62b8a4085f11bed6f16626d9e9e5583"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1401}}, {0x2a, &(0x7f0000000740)=@string={0x2a, 0x3, "0bc24193d376842d81feb3201d67fd3513f8c33e1241f66e19b1af1ab7fac6042432f5f4d626e73b"}}]}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000500)="9b", 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) syz_usb_connect(0x3, 0xdb4, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xf5, 0xd, 0xa4, 0x20, 0x12d1, 0x88e8, 0x6755, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda2, 0x4, 0xdc, 0xd, 0x10, 0x2, "", [{{0x9, 0x4, 0x1e, 0x1, 0x2, 0xff, 0x5, 0x17, 0xe, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "e231c962"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x3, 0x1, 0x6}, [@acm={0x4, 0x24, 0x2, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x3, 0xbd88, [0x8]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}], [{{0x9, 0x5, 0x2, 0x4, 0x10, 0xd, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x2}]}}, {{0x9, 0x5, 0xa, 0x14, 0x1ff, 0x8, 0xf6, 0xfe, [@generic={0xcb, 0xc, "69d43fd4ceb25b85b4a108b0826d024f3c8fb377bdceb94070767f1007febcc44d059f2d14596c2e981a059c17040ea8b65caf47b3cf8e5c37a7948032a11fc0ca9fb1b55b9501e9405850bb88cdd02304deb053c0f5a687e174f4de9a9e65d2c8070cf2820fd1ed43cc72c377cc5942fdfc27ca2533cc5ac1ca1b96eb5c79545c509c870faa7d1e5f9393574f670812df237946a6cf7ad41164622224379c947c2c2663db7392cd02bb2fce470f0991e52fcae4b414ee3b10a8217ae5087dc963979e8f8ef12fd5b8"}, @generic={0x102, 0x1, "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"}]}}]}}, {{0x9, 0x4, 0xe3, 0xd9, 0xe, 0xff, 0xff, 0xff, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x7, 0x8}, [@country_functional={0xe, 0x24, 0x7, 0x0, 0xa6, [0x8, 0x6f, 0xfe00, 0x8]}, @mdlm_detail={0xd5, 0x24, 0x13, 0x53, "3aaca8cbf1f3e5b17198175a4f15d5e315a80cfc27cc495eeb2d25cd35cbdc45200134670c8c9d42f12da19547ad797589932e3d50a596aa7dd65033355273c13757c2a7c2b9ea848f689ec41b7f185da1c86dfe01c616ef8f96a3cd0853c25cf3d09a1d07a4fdca05432e1746bdb7afae36d960b78e74ac88c8f5c26bf250168a3c4596668bf7f257a2b3ceede13351599c247a5bdf3b9b8bbce36b0103cf5c26a938706ac3692d48d12d4248b79c54ed92e100e15e235bfad439aadd544ddb37b760e89855347e3a59ab1927caf8282a"}, @dmm={0x7, 0x24, 0x14, 0x1, 0x8}, @mdlm_detail={0xd7, 0x24, 0x13, 0x1, "f4329cfd3c45acc2b0baf12cea7fe2b3b3f7c9c1aca2450e75b2780a81009a700c487da91d76e95655d48451449c1fd43181c022adc690a7a0f4fcdd75a88bd90b1719d34ced9d63f4751d6c70827f1598d1e9c89355c997dc40ab6208c5bdb848be8a2f0cf0ef06f148c1bda64b1f7888fa353ef2c6f2463e12e16a3ba59423b19644f952b52495d7bc57fb50c944dc528f287e0bcda7a437e109adb2b0440685965bb34cc5c92bda6b497e8741b231daee1a9dad2ae78fbdaeb9b870d636df41392453281e294f4de99b94692a9ea66d76b4"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @obex={0x5, 0x24, 0x15, 0x2659}]}, @hid_hid={0x9, 0x21, 0x595c, 0x5, 0x1, {0x22, 0x5d3}}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x0, 0xd, [@generic={0x9, 0x9, "2f659dd5548f33"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5c}, @generic={0xf2, 0x21, "983f0429f9924d9842dcc82953baed676272dd819dc36ac7878101dbf8bd8c625c56e11f44bdca13527a2019c17437ea0356dab0036cabe681173dec12c20c2649fa9cb66956b961c8aa00ed5f7726b6719d4ccfd0cfc8213071ecab40ba36b170cf9c7173b9e2e1dd741087543f67fd4ca153398472ed2ff0957d3846c188b331b6e1d87d9870e256d4e165ab696812c9fb8b0ac8d975c1fbc635ac49de01fbb6cf0709d0d5c205f8c022dd49782c5668971c1c8afcd78b2404d5f36a0650d0f685991c10ae3b4cd68e2f9d16e024a634a86f84c0a73553ede4c8a19a13a004eef57d02d7f4e683b3ec45957de9b37d"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x10, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xae, 0x7}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x5, 0x3, 0x8, [@generic={0x96, 0x3, "fda8bb9e983a33799bd6870985adcf695745c18297eca74980540fe812cec9b2cc4a944fe213ca217e45c649a8033c0afff54d222b9af1c5b08881acf19102f117415227ea9438bfb3f81b6fe981c548c9666390cff31a459bcae592901f63d93f48a83cc42e1c0194eb4a141f47dd472b9a5d3d7dbd9a6c7a5ed0662a6ce60d4036f594c714f6817ab946c05a3587d17bbadbaa"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xca, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x14, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0xf7, 0x7}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0xf0, 0x5, 0x9}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x7f, 0x2, 0xaa, [@generic={0xc5, 0x21, "81ab8eeb92c30319fa26ac7c0e45cad3f107451a4bdc94780d93f73d3206d8f654d97e8fb7fb36ceb0379f7c49ef6f58bb69d4e45ae2892e193902267210377f061cbe3a03319cb428284a066d02dc4f8b644ac0173b82acae658cd89cbeefea51db6b20157babd24e575ba09caf2b1992a40e2ad884917e611db440cf6b191339850d767e8204da8e65a1145ccc2376550da45c42ea42369101b830a9ca1bdddcf790c792809bc54e6a855d2b2733d5f51bf273c40a4b6850f471dcd77b0cc3eea17a"}, @generic={0xc5, 0x9, "3d10c9e6376ab2b41d006e06cfd5986a4d6875d9db5f6bfd522451bc1db25db6d5f69574bd99a5939f80da448a74723a85e10281096193e2c794b00cb43d5ed0dcf5c9d3bbb65015e53154469a05a16f2dd11d2ddda1bbb91165df2c778bd7b57583f84f81f991e47d85041d6268a2fd4f05cb9c60e9bd5beb25ad0973c351f9b51e8d7f2001cb6487a066c26ca7436de5d053946d6eee3e8909c07747dbca6721c4e7d30e312e2297bb73b82990e9c3d5ff6d16568678b24e60ce195892589e2ff915"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x10, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0xfc00}, @generic={0x11, 0x9, "e926e16c45069ed820f84b8b7f9429"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x10, 0x19, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x10}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x69, 0x3, 0x95, [@generic={0x3c, 0x22, "191d09695f75ca9a91e7892f4cd35c71834bcda7157aae670ac7b2aa505941b034ca04703a80549600cc8fb7f74ba380bc9254c07c2a9b278674"}, @generic={0x47, 0x11, "d30899279cdd28e8b0beda93f141696130650dc56ec5d1c05a5d0d30eafd3392957e113f3095319008fb5abacd0d55bbfeb9ebd2ec963883a3c4731fd6917e34da813f70d8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x5, 0xc5, 0x5, [@generic={0xf5, 0xf, "0ba7fb3d636cd31342877b54605d215c7d03e032e8d1630ce2ff1bbc8393b45ceaa1090cad179c42e80117f60b02c2f0038d603e12a8c9b87319956d9b209931fa08f7d0d6ea7d1cfb1b0f58496bbbebeba985834b155b2e8c4a7062cab6d4a8b011200daaa876d3df5ff4e98833367b28b02717e6e6f586528917fcb8c89eaa793e0066f6ed929ae0660453104c51e174e84b913d865d0281919a5879c8412ec66d699315c45d91488c91771dd7b9cc2d43deb054a90b5e806bd961cfaf8f1b4682ba3a5ec0848c4b9d9ebf5196fdf58f9bc17c39b59929e48a3f67590526c12cce33971e6c499bfb452643e70353154bdddf"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x85, 0x1, 0x6, [@generic={0x44, 0x3, "e352ce2872b8627d40d1e8b002357a06bdcbe6eed4cb940a9955fd07290b00aab74f698756c2cb4ecfecb442ab57ae67909311e0f91bb5c3aa3391d43e4819a8cb2d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xa883}]}}]}}, {{0x9, 0x4, 0x7a, 0xf, 0x5, 0xe4, 0xfe, 0x78, 0x3, [], [{{0x9, 0x5, 0xd, 0x4, 0x408, 0x4, 0x1, 0xd7, [@generic={0x4c, 0x1, "24262efd16fa5fac33cdc6f0bd562b080461e919009f5033a076b273fa1a406c9662396ba0c46b6e28c5f5c7cbf135c01d25b4ecda3f4238cc0959a50f2566edcdba2e4a936c6b1cf93f"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0x4, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x82, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x9, 0x3, 0x4}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x0, 0x7, 0x80}}]}}, {{0x9, 0x4, 0x48, 0x5, 0x5, 0x3f, 0x7d, 0x78, 0x5, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'o'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0xfff1, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0xa}, @mdlm_detail={0xb0, 0x24, 0x13, 0x9, "808999401886362926c83b8bf7d3090a40dc786c06ba5801c3a55ccb1f028111ff9a9c386c7dc896ce8beb3f679e2e2efc809cb4268230798a88dec69affdb249ce154ce8e24cae5ff6f071eb5c68d9cc4a75a7e7d9cf034f318b8d828c2af9e33eddc844d43c417b5fa627a1d976b87b788f524f6c7e577d20a416d718bbb65deca9456c2abeb8ad452136e16caf205119b13e5b03b91215d7c3659437a73aa73befc6cce410d5f623fadfe"}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x322e4e1e, 0x0, 0x5e20}, {0x6, 0x24, 0x1a, 0x6, 0x14}, [@mdlm_detail={0x62, 0x24, 0x13, 0x7, "4e6960b1817a958de28179fef73807630c3c6fcb4fbae63765233e51a5f2c005b3b261c67c9dd5ec42fde6837081f1455b049ea4f8d5d07c499b0cf78b00c3c17f8fd6cc956c3127c3545cfa979714d3b5fd3f7b4634f1a2043d0eb5e2f4"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0xfc, 0x2}}, {{0x9, 0x5, 0x1, 0x10, 0x43b0e6257f5ea9ec, 0xf9, 0x9, 0x10, [@generic={0x55, 0x22, "51155fa25e3c97e6a772e5b8d1eb368f067b4cce24379ef5ec64d0ea79fefdfd84e1a147880d9596194d9c87be0656df84b096f3768bdc3b4ea1ed4aeb8d53791a9bf93a15ccf44a4f807a25c1e0bdf1926c4e"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9, 0x0, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x7f, 0x10, 0x4, [@generic={0x76, 0x5, "0218ac5794a49841957ca1af7600af6571b1e2613a03b8d8bc902b9c18bb3c1cf6bdab6560ed1451e184c6a7f6fa7a55eceb09d3ff62f4692c9dcc4e9d4ed942ee895b868603ac8ffadf6fee5835998f1dde595c9b71270f3961a652b643e4c08c4bada7cdc7224d01f650cb9d388741824c4b2d"}, @generic={0x2c, 0x22, "06949577f46f0f6a2183ebbfc8bbdc4a4064831f9a181383cf57a102f321f44bc71919934e0208a40902"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x1, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}, @generic={0xc4, 0xf, "a6d62a2d9f40635d837a7a9008c616c6740cd8beb82b229d0df80522beda0e251411b7b360ce300d41cb7a89e867a182159bbc5c3d2a9082aeb95afdced26263dbcf919a5a368f22d41f1f49596589fa1f46257a7420d66b9ab6002d074eb28570d44f376612203dcf8e9434478c2d535c567ff52b07d7fbef1cf6191ef4aaefc8cc99ea64965c3de9ca169abeccc6f4dcbf6a278a0fac32c0bbfb4c8119c0b54f977d2dca956844573e49b3bcbf505b9e7df84af6d50b88e482635a0ed5de2922f9"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x310, 0x1, 0x10, 0x3, 0x10, 0x1}, 0x16, &(0x7f0000001640)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xc, 0x4cc5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x83, 0xa0b}]}, 0x3, [{0xcb, &(0x7f0000001680)=@string={0xcb, 0x3, "20f3719f35c746b2275fffb32331e47a30af575eec5a6bf89ebcc6aa00ae220a15cb1b52dddd1331ee964cf4e4c2f8f4971472cdb64dfb9f8167ca0055e5f280a5567b8f3274f926e60c57693126e1f1104cab51b6a32d3b11e7388bedbf184400aaca96e305923081373d1846d65e4a0df32965c464bd7d11813968317a9a4908564a9b5f5a623a7394579b8aee8894c1e6f5c845d16b8664c1c9c3751acb7a7134c3e40887c1e0561e8d014b9e8713e1f66e85d98beb2fe57026bd80cfcd01c767d7bc46d1b1b327"}}, {0x73, &(0x7f0000001780)=@string={0x73, 0x3, "0145fe7618764143e412d03235cf32eca42daaec7f2fe6b8c50dd50cd8ca8d1be73f88b275f31eb6e07427c748d35e90b023796c153e27bfaf73ab80ee59698985f9f8c034d4fcb842c04230251579983dbd39e9da79fbf952711a5d97d4cf15c0d9bd759a4c601ea88ebbd7feee76fa5d"}}, {0x66, &(0x7f0000001800)=@string={0x66, 0x3, "506507569c4f3a2c6431b5831bff8c0ab20694196f4072e064506d066b846c82bd51592e681835ea105d94677b67bcebd3b3932664c9c46b6ca22ddd4038fa0160b480b3973075e457fa4633346deda6d9492478d531601d8f67adf3bc4bf6a1fb068d66"}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) r5 = socket(0x23, 0x3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, @raw_data=[0x80b, 0x4, 0x1014, 0x1, 0x5, 0x4000007e, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x5, 0x1, 0x4]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f00000018c0)=""/113, &(0x7f0000001940)=0x71) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500000004000000050016000000000008001c000000000005000c00000000000a001a7ab8f599a9393b1a735cd91b70706213c2fa561011673d7e928808206ba24593a7c366e2765d7064ac367c9df942235729a4afc1d8467eff222f6a4c4e187bd66849c170fe8419cb67"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.313104315s ago: executing program 0 (id=6275): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x86, 0x6, 0x42, @mcast1, @mcast2, 0x8000, 0x0, 0x4, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40006}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003680)=[{0x0}], 0x1, 0xe) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x7, 0x0, 0x83}, {0x9, 0x5, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x5c}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @initdev}, &(0x7f0000000040)=0xc) r7 = socket(0x15, 0x80005, 0x0) getsockopt(r7, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) sendmsg$alg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="68dd0b4d31dc97cb5585a049350fc437671b07b8fe8e959e75e6651745bc978d3f3d6afb3fa2d1474e8031272b5732630b2c008a82cba5e088c58f88b58df0dac1855009c13519424c3192634aa656b4190e2bec093872e24f71a057a8433cffb593ad967689a8673370a101e1528c80ce5355a1e105f9efd7a31704fe052c9f528ea51f83436d4d502a809a851cebfb083e3e50425f79", 0x97}], 0x1, 0x0, 0x0, 0x2004c091}, 0x24004000) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x2000000, 0x109001) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x6, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @restrict={0x6}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x2}, {0x5, 0x1}]}, @datasec={0x9, 0x5, 0x0, 0xf, 0x2, [{0x3, 0xffff0001, 0x1}, {0x5, 0x3, 0x9}, {0x4, 0x1, 0x3}, {0x1, 0xfffffff7, 0x4}, {0x4, 0x8, 0x8}], "e725"}, @volatile={0x7, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000640)=""/117, 0xca, 0x75, 0x1, 0x7f, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000040)=""/55, 0x37, 0x0, &(0x7f0000000440)=""/146, 0x92}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x200008, 0x5, 0x20004}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r12 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x109402, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x48000000, '\x00', r0, r3, 0x5, 0x4}, 0x50) r14 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002d00), 0x80000, 0x0) readv(r14, &(0x7f00000033c0)=[{&(0x7f0000002d40)=""/12, 0xc}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0xcc, &(0x7f0000000440)=""/204, 0x41100, 0x10, '\x00', r0, @fallback=0x14, r9, 0x8, &(0x7f0000000700)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x0, 0x6}, 0x10, r10, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[r11, r12, r13, r14], &(0x7f00000008c0)=[{0x2, 0x2, 0xb, 0x5}, {0x0, 0x4, 0x4, 0x4}, {0x3, 0x2, 0x7, 0x8}, {0x0, 0x2, 0xf, 0x8}], 0x10, 0x26}, 0x94) ioctl$SCSI_IOCTL_PROBE_HOST(r8, 0x5385, &(0x7f0000000000)={0x3c, ""/60}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0) 2.257695045s ago: executing program 5 (id=6266): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010"], 0x28}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x8, 0x0, 0x80000000, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000a020202020200000c1f4900feac0f0000ac0f00d9c93c39f753fe366160c63ded17d0aa66b7b801a0bc31cdae1d64e131a3137df5212778371caa297829fec826a684a4ad697789ab027a99272f9eaeed5cba5e7e46a4fee0f9f2a7a9b0"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd65c, 0x7c}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4001) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r9, 0x100, 0x8, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x20005840) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0xc040) 2.020569921s ago: executing program 3 (id=6267): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002e40)=[{&(0x7f0000000440)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)="8e", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="2c0000008458b3d9670000004000010010000000fec0f21416d275e31bc8c6000006000000070000", @ANYRES32=0x0, @ANYBLOB="2c000000840000000100000008008100080000000000010000000000a26100000600000005000000", @ANYRES32=0x0, @ANYBLOB="14000000840000000500000000000000018000001000000084000000070000006401010014000000840000000000000001001f0008000008140000008400000000000000677403002b00001014"], 0xb8}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x2, 0xe, 0x420, 0xb8}, 0x8) 1.107194169s ago: executing program 1 (id=6268): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x6, 0x81, &(0x7f0000000300)="0000000000be1625950222e69c02d38d93c90d65ed667cf63fc008ee1ffbc9f9ae7855b08ad64c9ded50319524ddc16f5d400e4d34109d02f248fae8b4c45365e80556be940492112d7a56d1b0e5b1d677b20571ef5367904ce0a6e44f98de8193d0798aba", 0x65) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140), 0x0) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f00000001c0)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r2, 0xc0386447, &(0x7f0000000200)={{0x8, 0x7, &(0x7f0000000140)=[{0x0, 0x0, 0x3ff}, {0x8, 0x0, 0x10000}, {0xb2, 0x0, 0xa}, {0x4, 0x0, 0xd}, {0x2, 0x0, 0x7}, {0x5, 0x0, 0xc0e}, {0x40, 0x0, 0x4}]}, 0x3, 0x5, 0x40, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x6, r3}) sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x443b3af723a8488e) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000100000000008000240000024030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x3, 0xffffffffffffffff, 0x0}]) fchdir(r6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100020000000000000003000000400001802c0004001400010002000100ac141441000000000000000014002d0002000000e000000200241100000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = dup(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x28822}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_open_procfs(0x0, 0x0) 848.162609ms ago: executing program 0 (id=6269): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) write$tun(r2, &(0x7f0000002e80)=ANY=[], 0x5c) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) (async) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r8 = dup2(r7, r6) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, &(0x7f00000004c0)) preadv2(r1, &(0x7f0000003a80)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/84, 0x54}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/70, 0x46}, {&(0x7f00000037c0)=""/3, 0x3}, {&(0x7f0000003800)=""/214, 0xd6}, {&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/152, 0x98}], 0x9, 0x3, 0x6, 0x8) (async) dup2(r4, r5) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x7ff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63e, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x3ff, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xfffffffd], 0x1, 0x400}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f00000002c0)={@my=0x1, 0x3}) (async, rerun: 32) accept4(r1, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) (rerun: 32) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109"], 0x0) (async, rerun: 32) r9 = syz_open_dev$audion(&(0x7f0000000000), 0x56, 0x200000) (async, rerun: 32) r10 = socket(0xa, 0x3, 0x3a) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) (async, rerun: 32) write$P9_RVERSION(r9, &(0x7f0000002200)=ANY=[], 0xfffffcd9) (async, rerun: 32) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) 310.074µs ago: executing program 1 (id=6270): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00100c07aa008000", "7a8e220000000000009e59f31000000004000000000b00000000000000000014", "e73400", "000000d900"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=6271): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) io_uring_setup(0x1fba, &(0x7f0000000040)={0x0, 0xec31, 0x8, 0x2, 0x325}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400000027e2967c"], 0x48) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000010100000001000000ffffff"], 0x14) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0x0) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000001c0100001c112233440000800000050005"], 0x4a) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0e0a2abd7000fedbdf254900000008000300", @ANYRES32=r2, @ANYBLOB="0c00000bea765274e77bf015"], 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x480c0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) kernel console output (not intermixed with test programs): ] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input237 [ 1312.974538][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1312.989011][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.006544][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.006867][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.033227][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.052612][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.085557][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.107279][T26185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.107355][T26185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.107522][T26185] bridge_slave_1: entered allmulticast mode [ 1313.108955][T26185] bridge_slave_1: entered promiscuous mode [ 1313.139818][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.166030][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.194193][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.232484][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.267017][T25978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1313.301687][T25978] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1313.301708][T25978] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1313.306659][T25186] net_ratelimit: 50 callbacks suppressed [ 1313.306675][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1313.306751][T25186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.422561][T25184] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.422725][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1313.522565][T26185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.535018][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1313.535064][T25184] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.551149][T26185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.713531][T26185] team0: Port device team_slave_0 added [ 1313.737102][T26185] team0: Port device team_slave_1 added [ 1313.813200][T26185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.813221][T26185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.813251][T26185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.878581][T26185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.878601][T26185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.878631][T26185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.017183][T26185] hsr_slave_0: entered promiscuous mode [ 1314.018276][T26185] hsr_slave_1: entered promiscuous mode [ 1314.156846][T25186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1314.156897][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1314.368245][T25979] usb 4-1: USB disconnect, device number 5 [ 1314.606934][ T152] pim6reg: left allmulticast mode [ 1314.841754][ T5633] Bluetooth: hci1: command tx timeout [ 1314.858793][T26274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6073'. [ 1314.893832][ T8606] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1314.973184][ T152] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1314.981251][ T152] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1314.986863][ T152] ip6gretap1 (unregistering): left allmulticast mode [ 1315.115605][ T8606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1315.116904][ T8606] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.116954][ T8606] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1315.119271][ T8606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.119300][ T8606] usb 2-1: Product: syz [ 1315.119316][ T8606] usb 2-1: Manufacturer: syz [ 1315.119332][ T8606] usb 2-1: SerialNumber: syz [ 1315.136393][ T8606] cdc_mbim 2-1:1.0: skipping garbage [ 1315.343229][T26266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1315.363103][ T152] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 1315.363135][ T152] bridge1 (unregistering): left allmulticast mode [ 1315.391372][T13907] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1315.413097][ T152] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1315.413619][ T152] macvlan2: left allmulticast mode [ 1315.413638][ T152] bond0 (unregistering): left allmulticast mode [ 1315.416780][ T152] bond1 (unregistering): Released all slaves [ 1315.485132][ T152] bond0 (unregistering): Released all slaves [ 1315.507138][ T152] bond2 (unregistering): Released all slaves [ 1315.521340][ T152] bond3 (unregistering): Released all slaves [ 1315.549498][ T152] bond4 (unregistering): Released all slaves [ 1315.563867][T13907] usb 4-1: Using ep0 maxpacket: 8 [ 1315.564646][T13907] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1315.565974][T13907] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 1315.566002][T13907] usb 4-1: config 127 has no interface number 1 [ 1315.566085][T13907] usb 4-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 1315.566114][T13907] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0x88 has invalid maxpacket 256, setting to 64 [ 1315.566143][T13907] usb 4-1: config 127 interface 171 has no altsetting 0 [ 1315.566164][T13907] usb 4-1: config 127 interface 0 has no altsetting 0 [ 1315.569031][T13907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.569059][T13907] usb 4-1: Product: syz [ 1315.569076][T13907] usb 4-1: Manufacturer: syz [ 1315.569120][T13907] usb 4-1: SerialNumber: syz [ 1315.585859][ T152] bond6 (unregistering): Released all slaves [ 1315.656082][ T152] bond5 (unregistering): Released all slaves [ 1315.731237][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1315.951428][T13907] xr_serial 4-1:127.171: xr_serial converter detected [ 1315.978296][T13907] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1315.978391][T13907] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1315.980727][T26266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1315.981263][ T8606] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1315.981287][ T8606] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1316.036313][T13907] usb 4-1: USB disconnect, device number 6 [ 1316.050661][T13907] xr_serial 4-1:127.171: device disconnected [ 1316.133162][T26286] netlink: 'syz.2.6075': attribute type 1 has an invalid length. [ 1316.152683][T26286] libceph: resolve '0..' (ret=-3): failed [ 1316.353083][ T152] .!: left promiscuous mode [ 1316.463204][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1316.927013][ T5633] Bluetooth: hci1: command tx timeout [ 1316.989038][T26295] fuse: Bad value for 'user_id' [ 1316.989061][T26295] fuse: Bad value for 'user_id' [ 1317.052257][ T152] tipc: Disabling bearer [ 1317.052523][ T152] tipc: Left network mode [ 1317.075405][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1317.105144][T13907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1317.213315][ T8606] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1317.235078][ T8606] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1317.251269][ T8606] wwan wwan0: port wwan0mbim0 attached [ 1317.277919][ T8606] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 8a:fd:3e:7e:28:fe [ 1317.300553][ T8606] usb 2-1: USB disconnect, device number 13 [ 1317.302506][ T8606] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1317.326536][T13907] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1317.328457][T13907] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1317.328495][T13907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1317.328523][T13907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1317.331090][T13907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.331119][T13907] usb 4-1: Product: syz [ 1317.331137][T13907] usb 4-1: Manufacturer: syz [ 1317.331153][T13907] usb 4-1: SerialNumber: syz [ 1317.342717][T13907] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 1317.569154][ T8606] wwan wwan0: port wwan0mbim0 disconnected [ 1317.760263][T25978] usb 4-1: USB disconnect, device number 7 [ 1318.051814][T26308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.052396][T26308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.073898][T26308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.101901][T26308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.684522][T11818] net_ratelimit: 5 callbacks suppressed [ 1318.684548][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1318.873069][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1319.045882][T26319] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1319.082475][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1319.163435][ T31] audit: type=1326 audit(1789864475.293:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.163491][ T31] audit: type=1326 audit(1789864475.293:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.214511][ T31] audit: type=1326 audit(1789864475.333:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.214567][ T31] audit: type=1326 audit(1789864475.353:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.215509][ T31] audit: type=1326 audit(1789864475.353:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.215558][ T31] audit: type=1326 audit(1789864475.353:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.215605][ T31] audit: type=1326 audit(1789864475.353:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.215969][ T31] audit: type=1326 audit(1789864475.353:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.216483][ T31] audit: type=1326 audit(1789864475.353:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.216875][ T31] audit: type=1326 audit(1789864475.353:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.1.6081" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 1319.219895][T25979] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1319.600956][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1319.636252][T26185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1319.657237][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1319.658848][T26185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1319.710788][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.711823][T26185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1319.740930][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1319.742590][T26185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1319.778111][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1319.857695][T25979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1319.869591][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1319.924496][T25979] usb 4-1: not running at top speed; connect to a high speed hub [ 1319.924537][T25979] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1319.989846][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1320.043176][T25979] usb 4-1: config 1 has an invalid interface number: 107 but max is 2 [ 1320.043211][T25979] usb 4-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 1320.043234][T25979] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1320.043258][T25979] usb 4-1: config 1 has no interface number 1 [ 1320.043301][T25979] usb 4-1: too many endpoints for config 1 interface 107 altsetting 245: 128, using maximum allowed: 30 [ 1320.043352][T25979] usb 4-1: config 1 interface 107 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1320.043384][T25979] usb 4-1: config 1 interface 107 has no altsetting 0 [ 1320.186067][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1320.205979][T25978] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1320.293156][T25979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.293191][T25979] usb 4-1: Product: syz [ 1320.293207][T25979] usb 4-1: Manufacturer: syz [ 1320.293223][T25979] usb 4-1: SerialNumber: syz [ 1320.302356][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1320.387748][ T152] hsr_slave_0: left promiscuous mode [ 1320.388749][ T152] hsr_slave_1: left promiscuous mode [ 1320.443772][ T152] veth1_macvtap: left promiscuous mode [ 1320.443813][ T152] veth0_macvtap: left promiscuous mode [ 1320.443939][ T152] veth1_vlan: left promiscuous mode [ 1320.444012][ T152] veth0_vlan: left promiscuous mode [ 1320.468189][T25978] usb 2-1: Using ep0 maxpacket: 16 [ 1320.496822][T25978] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1320.514686][T25978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.514881][T25978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1320.514976][T25978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1320.515019][T25978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1320.515115][T25978] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.519432][T25978] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1320.519507][T25978] usb 2-1: Manufacturer: syz [ 1320.578261][T25978] usb 2-1: config 0 descriptor?? [ 1320.993932][T25978] rc_core: IR keymap rc-hauppauge not found [ 1320.993992][T25978] Registered IR keymap rc-empty [ 1320.994458][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.044418][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.066013][T26338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.087272][T25978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1321.090855][T25978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input238 [ 1321.093275][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.094111][T26338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.147471][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.169068][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.204902][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.232901][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.271488][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.303277][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.314415][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.347362][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.380943][T25978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1321.416865][T25978] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1321.416896][T25978] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1322.002655][T25979] usb 4-1: 0:1 : does not exist [ 1322.002696][T25979] usb 4-1: 0:2 : does not exist [ 1322.018007][T26357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6086'. [ 1322.089146][T26185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.102199][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1322.115378][T26185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.158305][T11818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.158403][T11818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.160055][T11818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.160142][T11818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.238200][T26185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1322.238229][T26185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1322.267275][T25979] usb 4-1: USB disconnect, device number 8 [ 1322.288929][T26185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.402219][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1322.420357][T25975] usb 2-1: USB disconnect, device number 14 [ 1322.455970][T17526] udevd[17526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.635965][T26185] veth0_vlan: entered promiscuous mode [ 1322.670197][T26185] veth1_vlan: entered promiscuous mode [ 1322.725956][T26185] veth0_macvtap: entered promiscuous mode [ 1322.790494][T26185] veth1_macvtap: entered promiscuous mode [ 1322.834438][T26185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.840787][T26185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.959641][T25979] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1323.029344][T25183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.031658][T25183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.032098][T25183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.032143][T25183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.102782][T26391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6093'. [ 1323.233323][T25975] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1323.318550][T25979] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1323.387429][T21837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.387456][T21837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.441610][T25979] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1323.441683][T25979] usb 4-1: Product: syz [ 1323.478941][T25975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1323.479097][T25975] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1323.481104][T25979] usb 4-1: config 0 descriptor?? [ 1323.483530][T25975] usb 3-1: config 3 has an invalid interface number: 92 but max is 0 [ 1323.483661][T25975] usb 3-1: config 3 has no interface number 0 [ 1323.483781][T25975] usb 3-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 1323.483849][T25975] usb 3-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1323.483915][T25975] usb 3-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1323.483982][T25975] usb 3-1: config 3 interface 92 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 1323.484052][T25975] usb 3-1: config 3 interface 92 has no altsetting 0 [ 1323.584620][T25979] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1323.585955][T25979] usb 4-1: Detected FT232H [ 1323.659332][T25975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.659396][T25975] usb 3-1: Product: syz [ 1323.659490][T25975] usb 3-1: Manufacturer: syz [ 1323.659527][T25975] usb 3-1: SerialNumber: syz [ 1323.694174][T25979] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1323.719931][T26389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1323.777670][T21837] net_ratelimit: 5 callbacks suppressed [ 1323.777696][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1323.786035][T11818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.786106][T11818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.892460][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1323.965726][T26389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.970544][T26389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.004692][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.077109][T25975] usb 3-1: probing VID:PID(0424:012C) [ 1324.097845][T25975] usb 3-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1324.097912][T25975] usb 3-1: vub300 testing BULK IN EndPoint(1) 8B [ 1324.098004][T25975] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1324.125088][T25975] vub300 3-1:3.92: probe with driver vub300 failed with error -22 [ 1324.131241][T25975] usb 3-1: USB disconnect, device number 99 [ 1324.194915][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.288856][T26407] tipc: Resetting bearer [ 1324.359840][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.471948][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.502110][T26409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1324.575094][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.638528][T26412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.639063][T26412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.696966][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.822431][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1324.927888][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1325.184396][T13907] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1325.354871][T25979] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1325.356626][T13907] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 1325.357597][T25979] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1325.360141][T13907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1325.360179][T13907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1325.367150][T13907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.367186][T13907] usb 1-1: Product: syz [ 1325.367206][T13907] usb 1-1: Manufacturer: syz [ 1325.367224][T13907] usb 1-1: SerialNumber: syz [ 1325.369860][T25979] usb 4-1: USB disconnect, device number 9 [ 1325.395799][T13907] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 1325.439185][T13907] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB1 [ 1325.497463][T25979] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1325.498124][T25979] ftdi_sio 4-1:0.0: device disconnected [ 1325.514089][ T5684] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1325.565450][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1325.571159][T26429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1325.571226][T26429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1325.683802][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 1325.685009][ T5684] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1325.686356][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.686408][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1325.686440][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1325.686465][ T5684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1325.686492][ T5684] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.688643][ T5684] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1325.688672][ T5684] usb 3-1: Manufacturer: syz [ 1325.701492][ T5684] usb 3-1: config 0 descriptor?? [ 1325.746747][T26415] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6098'. [ 1325.885630][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1325.888928][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1325.889963][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1326.024360][ T5684] rc_core: IR keymap rc-hauppauge not found [ 1326.024384][ T5684] Registered IR keymap rc-empty [ 1326.024552][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.059458][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.078438][ T5684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1326.088284][ T5684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input239 [ 1326.117830][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.147832][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.178121][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.186734][T26427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.204295][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.212910][T26427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.224339][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.244054][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.263882][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.294326][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.333992][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.364601][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1326.400261][ T5684] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1326.401398][ T5684] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1326.439865][ T5684] usb 3-1: USB disconnect, device number 100 [ 1326.652543][ T1221] usb 1-1: USB disconnect, device number 113 [ 1326.742998][ T1221] kobil ttyUSB1: KOBIL USB smart card terminal converter now disconnected from ttyUSB1 [ 1326.747210][ T8606] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1326.769927][ T1221] kobil_sct 1-1:1.0: device disconnected [ 1326.945354][ T8606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1326.945410][ T8606] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1326.949119][ T8606] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 1326.949154][ T8606] usb 2-1: config 3 has no interface number 0 [ 1326.949198][ T8606] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 1326.949229][ T8606] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1326.949256][ T8606] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1326.949281][ T8606] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 1326.949308][ T8606] usb 2-1: config 3 interface 92 has no altsetting 0 [ 1326.958805][ T8606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.958904][ T8606] usb 2-1: Product: syz [ 1326.958947][ T8606] usb 2-1: Manufacturer: syz [ 1326.958999][ T8606] usb 2-1: SerialNumber: syz [ 1326.994306][T26444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1327.253750][T26444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.254426][T26444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.322919][ T8606] usb 2-1: probing VID:PID(0424:012C) [ 1327.333501][ T8606] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1327.340484][ T8606] usb 2-1: vub300 testing BULK IN EndPoint(1) 8B [ 1327.340579][ T8606] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1327.382206][ T8606] vub300 2-1:3.92: probe with driver vub300 failed with error -22 [ 1327.419864][ T8606] usb 2-1: USB disconnect, device number 15 [ 1327.589203][T26458] __nla_validate_parse: 1 callbacks suppressed [ 1327.589227][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1327.619590][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1327.621425][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1327.659630][T26462] syzkaller0: entered promiscuous mode [ 1327.659655][T26462] syzkaller0: entered allmulticast mode [ 1327.662685][T26462] tipc: Started in network mode [ 1327.662719][T26462] tipc: Node identity a6c7988c5438, cluster identity 4711 [ 1327.663030][T26462] tipc: Enabled bearer , priority 0 [ 1327.714521][ T1221] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1327.714731][T26461] tipc: Resetting bearer [ 1327.827084][T26461] tipc: Disabling bearer [ 1327.914342][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 1327.917170][ T1221] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1327.918571][ T1221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.918626][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1327.918656][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1327.918680][ T1221] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1327.918706][ T1221] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.920384][ T1221] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1327.920423][ T1221] usb 3-1: Manufacturer: syz [ 1327.930461][ T1221] usb 3-1: config 0 descriptor?? [ 1328.330698][ T1221] rc_core: IR keymap rc-hauppauge not found [ 1328.330721][ T1221] Registered IR keymap rc-empty [ 1328.330846][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.356218][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.386228][ T1221] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1328.393031][ T1221] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input240 [ 1328.410546][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.420861][T26452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.433755][T26452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.454739][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.475351][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.494246][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.525608][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.554636][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.588248][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.615681][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.643875][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.676375][ T1221] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1328.718432][ T1221] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1328.718460][ T1221] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1328.727651][ T1221] usb 3-1: USB disconnect, device number 101 [ 1328.808705][T26480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6120'. [ 1328.980729][T26481] qrtr: Invalid version 147 [ 1328.984372][T26481] fuse: Unknown parameter '0x000000000000000a' [ 1329.032034][T26481] fuse: Unknown parameter ' [ 1329.032034][T26481] ' [ 1329.166235][T26491] net_ratelimit: 27 callbacks suppressed [ 1329.166257][T26491] socket: no more sockets [ 1329.272643][T26491] socket: no more sockets [ 1329.326685][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1329.424594][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1329.468281][T26491] socket: no more sockets [ 1329.509365][T26491] socket: no more sockets [ 1329.515936][T26491] socket: no more sockets [ 1329.522040][T26491] socket: no more sockets [ 1329.527185][T26491] socket: no more sockets [ 1329.554261][T26491] socket: no more sockets [ 1330.246403][ T1221] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1330.273702][ T8606] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1330.448591][ T1221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1330.449044][ T1221] usb 3-1: not running at top speed; connect to a high speed hub [ 1330.449068][ T1221] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1330.449940][ T1221] usb 3-1: config 1 has an invalid interface number: 107 but max is 2 [ 1330.449958][ T1221] usb 3-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 1330.449973][ T1221] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1330.449988][ T1221] usb 3-1: config 1 has no interface number 1 [ 1330.450015][ T1221] usb 3-1: too many endpoints for config 1 interface 107 altsetting 245: 128, using maximum allowed: 30 [ 1330.450051][ T1221] usb 3-1: config 1 interface 107 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1330.450072][ T1221] usb 3-1: config 1 interface 107 has no altsetting 0 [ 1330.451840][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.451879][ T1221] usb 3-1: Product: syz [ 1330.451891][ T1221] usb 3-1: Manufacturer: syz [ 1330.451903][ T1221] usb 3-1: SerialNumber: syz [ 1330.477434][ T8606] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1330.487970][ T8606] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1330.488087][ T8606] usb 2-1: can't read configurations, error -22 [ 1330.633934][ T8606] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1330.835293][ T8606] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1330.838638][ T8606] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1330.838683][ T8606] usb 2-1: can't read configurations, error -22 [ 1330.839024][ T8606] usb usb2-port1: attempt power cycle [ 1330.896051][ T5684] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1331.071444][ T5684] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1331.071540][ T5684] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1331.073991][ T5684] usb 1-1: config 3 has an invalid interface number: 92 but max is 0 [ 1331.074167][ T5684] usb 1-1: config 3 has no interface number 0 [ 1331.075805][ T5684] usb 1-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 1331.075954][ T5684] usb 1-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1331.076016][ T5684] usb 1-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1331.076127][ T5684] usb 1-1: config 3 interface 92 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 1331.076200][ T5684] usb 1-1: config 3 interface 92 has no altsetting 0 [ 1331.094337][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.094554][ T5684] usb 1-1: Product: syz [ 1331.094604][ T5684] usb 1-1: Manufacturer: syz [ 1331.094703][ T5684] usb 1-1: SerialNumber: syz [ 1331.127931][T26510] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1331.203749][ T8606] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1331.236178][ T8606] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1331.238493][ T8606] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1331.238527][ T8606] usb 2-1: can't read configurations, error -22 [ 1331.340076][T26510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.340747][T26510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.362164][ T5684] usb 1-1: probing VID:PID(0424:012C) [ 1331.370908][ T5684] usb 1-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1331.370985][ T5684] usb 1-1: vub300 testing BULK IN EndPoint(1) 8B [ 1331.371097][ T5684] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1331.382160][ T5684] vub300 1-1:3.92: probe with driver vub300 failed with error -22 [ 1331.385293][ T8606] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1331.422966][ T5684] usb 1-1: USB disconnect, device number 114 [ 1331.433423][ T8606] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1331.447466][ T8606] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1331.447509][ T8606] usb 2-1: can't read configurations, error -22 [ 1331.447813][ T8606] usb usb2-port1: unable to enumerate USB device [ 1332.102750][T26531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.103419][T26531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.193721][T13905] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1332.364140][T13905] usb 1-1: Using ep0 maxpacket: 16 [ 1332.365326][T13905] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1332.368499][T13905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.368592][T13905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1332.368629][T13905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1332.368656][T13905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1332.368684][T13905] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.373472][T13905] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1332.373506][T13905] usb 1-1: Manufacturer: syz [ 1332.416569][T13905] usb 1-1: config 0 descriptor?? [ 1332.541690][T26533] syzkaller0: entered promiscuous mode [ 1332.541721][T26533] syzkaller0: entered allmulticast mode [ 1332.660171][ T1221] usb 3-1: 0:1 : does not exist [ 1332.660199][ T1221] usb 3-1: 0:2 : does not exist [ 1332.730253][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6140'. [ 1332.790942][T13905] rc_core: IR keymap rc-hauppauge not found [ 1332.790964][T13905] Registered IR keymap rc-empty [ 1332.791112][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1332.817822][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1332.835569][T13905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1332.842743][T13905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input241 [ 1332.881728][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1332.882703][ T1221] usb 3-1: USB disconnect, device number 102 [ 1332.904187][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1332.934355][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1332.950459][T26527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.951071][T26527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.964045][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1332.994157][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1333.049165][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1333.054549][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1333.107742][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1333.135926][T17526] udevd[17526]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.166872][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1333.199015][T13905] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1333.235261][T13905] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1333.235288][T13905] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1333.487776][ T1221] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1333.663836][ T1221] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1333.665276][ T1221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.665396][ T1221] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1333.667485][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1333.667515][ T1221] usb 3-1: Product: syz [ 1333.667532][ T1221] usb 3-1: Manufacturer: syz [ 1333.757755][ T1221] rndis_host 3-1:1.0: probe with driver rndis_host failed with error -22 [ 1333.972188][T18526] usb 3-1: USB disconnect, device number 103 [ 1334.829919][T26557] net_ratelimit: 45 callbacks suppressed [ 1334.829944][T26557] netlink: Setting conntrack mark requires 'commit' flag. [ 1334.829974][T26557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.964725][T26559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.965269][T26559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.023851][T26559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.024358][T26559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.363281][T25979] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 1335.636016][T25979] usb 3-1: Invalid ep0 maxpacket: 64 [ 1335.721464][T26565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6148'. [ 1335.786214][T25979] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 1335.794990][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6148'. [ 1335.796064][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6148'. [ 1336.019804][T13905] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1336.086666][T25979] usb 3-1: Invalid ep0 maxpacket: 64 [ 1336.087222][T25979] usb usb3-port1: attempt power cycle [ 1336.235299][T13905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1336.264394][T13905] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1336.275851][T13905] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 1336.275881][T13905] usb 2-1: config 3 has no interface number 0 [ 1336.275944][T13905] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 1336.275971][T13905] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1336.275995][T13905] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1336.276016][T13905] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 1336.276048][T13905] usb 2-1: config 3 interface 92 has no altsetting 0 [ 1336.278773][T13905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.278801][T13905] usb 2-1: Product: syz [ 1336.278817][T13905] usb 2-1: Manufacturer: syz [ 1336.278857][T13905] usb 2-1: SerialNumber: syz [ 1336.286565][T26566] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1336.483862][T25979] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1336.512728][T26566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.513285][T26566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.556799][T13905] usb 2-1: probing VID:PID(0424:012C) [ 1336.559529][T13905] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1336.559585][T13905] usb 2-1: vub300 testing BULK IN EndPoint(1) 8B [ 1336.559607][T13905] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1336.611722][T13905] vub300 2-1:3.92: probe with driver vub300 failed with error -22 [ 1336.627316][T25979] usb 3-1: Invalid ep0 maxpacket: 64 [ 1336.666691][T13905] usb 2-1: USB disconnect, device number 20 [ 1336.811454][T25979] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1336.981472][T25979] usb 3-1: Invalid ep0 maxpacket: 64 [ 1336.981785][T25979] usb usb3-port1: unable to enumerate USB device [ 1337.335005][T26569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.338205][T26569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.534398][T25977] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1337.791771][T25977] usb 2-1: Using ep0 maxpacket: 32 [ 1337.805408][T25977] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1337.886021][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1337.962683][T25977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.965673][T25977] usb 2-1: config 0 descriptor?? [ 1338.024567][T25977] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1338.397283][T25977] gspca_sq930x: reg_r 001f failed -71 [ 1338.397514][T25977] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1338.423209][T25977] usb 2-1: USB disconnect, device number 21 [ 1339.472370][T26583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1339.487834][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1342.228690][T25979] usb 1-1: USB disconnect, device number 115 [ 1342.317065][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1342.425221][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1342.481502][T26600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1342.533732][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1342.643782][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1342.753742][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1342.865163][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1342.973767][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1343.084101][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1343.194676][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1344.133930][ T5684] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1344.309114][ T5684] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1344.309173][ T5684] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1344.311142][ T5684] usb 4-1: config 3 has an invalid interface number: 92 but max is 0 [ 1344.311173][ T5684] usb 4-1: config 3 has no interface number 0 [ 1344.311217][ T5684] usb 4-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 1344.311247][ T5684] usb 4-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1344.311274][ T5684] usb 4-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1344.311298][ T5684] usb 4-1: config 3 interface 92 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 1344.311325][ T5684] usb 4-1: config 3 interface 92 has no altsetting 0 [ 1344.325830][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.325912][ T5684] usb 4-1: Product: syz [ 1344.325961][ T5684] usb 4-1: Manufacturer: syz [ 1344.326005][ T5684] usb 4-1: SerialNumber: syz [ 1344.418554][T26611] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1344.659697][T26611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.660320][T26611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.730008][ T5684] usb 4-1: probing VID:PID(0424:012C) [ 1344.731149][ T5684] usb 4-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1344.731166][ T5684] usb 4-1: vub300 testing BULK IN EndPoint(1) 8B [ 1344.731181][ T5684] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1344.781021][ T5684] vub300 4-1:3.92: probe with driver vub300 failed with error -22 [ 1344.811156][ T5684] usb 4-1: USB disconnect, device number 10 [ 1344.876399][T26624] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1344.888805][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1345.904523][T26636] loop5: detected capacity change from 0 to 7 [ 1345.909599][T26636] Dev loop5: unable to read RDB block 7 [ 1345.909645][T26636] loop5: unable to read partition table [ 1345.912588][T26636] loop5: partition table beyond EOD, truncated [ 1345.912631][T26636] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1346.050876][T26643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1347.403505][T21837] net_ratelimit: 36 callbacks suppressed [ 1347.403974][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1347.513734][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1347.628736][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1347.735262][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1347.843796][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1347.953911][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1348.091530][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1348.214595][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1348.327164][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1348.375090][T26676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.377614][T26676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.434336][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1348.767849][ T1221] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1348.921716][ T1221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1348.927950][ T1221] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1348.928052][ T1221] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1348.928104][ T1221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1348.928167][ T1221] usb 2-1: config 1 has no interface number 0 [ 1348.928277][ T1221] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1348.928352][ T1221] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.999743][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.999776][ T1221] usb 2-1: Product: syz [ 1348.999792][ T1221] usb 2-1: Manufacturer: syz [ 1348.999809][ T1221] usb 2-1: SerialNumber: syz [ 1349.039688][ T1221] cdc_wdm 2-1:1.128: skipping garbage [ 1349.062395][ T1221] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 1349.062420][ T1221] cdc_wdm 2-1:1.128: Unknown control protocol [ 1349.574195][T18526] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1349.743809][T18526] usb 3-1: Using ep0 maxpacket: 32 [ 1349.745640][T18526] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1349.748659][T18526] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1349.748722][T18526] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.748783][T18526] usb 3-1: config 2 has no interface number 0 [ 1349.748885][T18526] usb 3-1: config 2 interface 88 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1349.748949][T18526] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1349.877208][T18526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1349.877238][T18526] usb 3-1: Product: syz [ 1349.877255][T18526] usb 3-1: Manufacturer: syz [ 1349.877274][T18526] usb 3-1: SerialNumber: syz [ 1349.941893][T18526] asix 3-1:2.88: probe with driver asix failed with error -22 [ 1350.105329][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6187'. [ 1350.168952][ T5684] usb 3-1: USB disconnect, device number 108 [ 1351.157954][T18526] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1351.305302][T18526] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1351.309871][T18526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.348669][T18526] usb 1-1: config 0 descriptor?? [ 1351.384692][T26722] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6190'. [ 1351.552872][ T5684] usb 2-1: USB disconnect, device number 22 [ 1351.574018][T26718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.576371][T26718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.640341][T18526] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1351.838169][T26732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.839959][T26732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.908457][T18526] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1351.908489][T18526] [drm] Initialized udl on minor 1 [ 1351.915904][T26732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.919909][T26732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.103682][ T5684] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1352.106157][T26718] sg_write: process 43 (syz.0.6199) changed security contexts after opening file descriptor, this is not allowed. [ 1352.109920][T26718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.112045][T26718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.282452][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1352.282510][ T5684] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 1352.284027][ T5684] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 1352.284103][ T5684] usb 2-1: config 3 has no interface number 0 [ 1352.284226][ T5684] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024 [ 1352.284288][ T5684] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1352.284369][ T5684] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1352.284433][ T5684] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 0 [ 1352.284498][ T5684] usb 2-1: config 3 interface 92 has no altsetting 0 [ 1352.330501][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.330533][ T5684] usb 2-1: Product: syz [ 1352.330549][ T5684] usb 2-1: Manufacturer: syz [ 1352.330566][ T5684] usb 2-1: SerialNumber: syz [ 1352.400521][T26729] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1352.458036][T21837] net_ratelimit: 34 callbacks suppressed [ 1352.458086][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1352.565240][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1352.650412][T26735] syzkaller0: entered promiscuous mode [ 1352.650440][T26735] syzkaller0: entered allmulticast mode [ 1352.669337][T26734] tipc: Enabled bearer , priority 0 [ 1352.706983][T26733] tipc: Resetting bearer [ 1352.756935][ T5684] usb 2-1: probing VID:PID(0424:012C) [ 1352.797769][ T5684] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 1352.797800][ T5684] usb 2-1: vub300 testing BULK IN EndPoint(1) 8B [ 1352.797822][ T5684] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1352.879464][ T5684] vub300 2-1:3.92: probe with driver vub300 failed with error -22 [ 1352.911571][ T5684] usb 2-1: USB disconnect, device number 23 [ 1353.029936][T26733] tipc: Disabling bearer [ 1353.114090][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1353.215803][T26745] loop5: detected capacity change from 0 to 7 [ 1353.241607][T26745] Dev loop5: unable to read RDB block 7 [ 1353.241659][T26745] loop5: unable to read partition table [ 1353.241908][T26745] loop5: partition table beyond EOD, truncated [ 1353.241948][T26745] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1353.277046][T26742] socket: no more sockets [ 1353.307132][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1353.418304][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1353.462398][T26718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6199'. [ 1353.512741][T26718] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1353.561476][T26718] bond1 (unregistering): Released all slaves [ 1353.574472][T26751] FAULT_INJECTION: forcing a failure. [ 1353.574472][T26751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.574501][T26751] CPU: 0 UID: 0 PID: 26751 Comm: syz.5.6202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1353.574523][T26751] Tainted: [L]=SOFTLOCKUP [ 1353.574529][T26751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1353.574539][T26751] Call Trace: [ 1353.574545][T26751] [ 1353.574552][T26751] dump_stack_lvl+0xe8/0x150 [ 1353.574580][T26751] should_fail_ex+0x410/0x560 [ 1353.574602][T26751] _copy_from_user+0x2d/0xb0 [ 1353.574623][T26751] get_compat_msghdr+0xb3/0x4c0 [ 1353.574650][T26751] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1353.574683][T26751] ___sys_sendmsg+0x201/0x360 [ 1353.574704][T26751] ? __lock_acquire+0x747/0x2de0 [ 1353.574724][T26751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1353.574745][T26751] ? get_pid_task+0x20/0x1f0 [ 1353.574760][T26751] ? get_pid_task+0x20/0x1f0 [ 1353.574774][T26751] ? get_pid_task+0x20/0x1f0 [ 1353.574813][T26751] ? __fget_files+0x2a/0x420 [ 1353.574835][T26751] ? __fget_files+0x3a2/0x420 [ 1353.574865][T26751] __sys_sendmsg+0x177/0x240 [ 1353.574887][T26751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1353.574922][T26751] __do_fast_syscall_32+0x27a/0x6a0 [ 1353.574942][T26751] ? do_fast_syscall_32+0x33/0x70 [ 1353.574964][T26751] ? asm_int80_emulation+0x1a/0x20 [ 1353.574980][T26751] ? do_int80_emulation+0x299/0x500 [ 1353.574997][T26751] ? trace_irq_disable+0x3b/0x140 [ 1353.575017][T26751] do_fast_syscall_32+0x33/0x70 [ 1353.575036][T26751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1353.575056][T26751] RIP: 0023:0xf7f050ec [ 1353.575071][T26751] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1353.575085][T26751] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1353.575103][T26751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1353.575115][T26751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.575124][T26751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.575134][T26751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1353.575144][T26751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.575172][T26751] [ 1353.804324][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1353.926091][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1354.046590][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1354.157102][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1354.170567][T26768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.173048][T26768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.220513][T26765] input: syz0 as /devices/virtual/input/input243 [ 1354.220588][T26765] input: failed to attach handler leds to device input243, error: -6 [ 1354.363996][T25977] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1354.444738][ T5684] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1354.552364][T25977] usb 2-1: Using ep0 maxpacket: 32 [ 1354.609958][T25977] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1354.649948][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 1354.650975][ T5684] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1354.652332][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.652386][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1354.652418][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.652442][ T5684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1354.652469][ T5684] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.653513][ T5684] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1354.653628][ T5684] usb 3-1: Manufacturer: syz [ 1354.670942][ T5684] usb 3-1: config 0 descriptor?? [ 1354.743681][T25977] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1354.743716][T25977] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.743737][T25977] usb 2-1: config 2 has no interface number 0 [ 1354.743780][T25977] usb 2-1: config 2 interface 88 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1354.743810][T25977] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1354.975255][T25977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1354.975291][T25977] usb 2-1: Product: syz [ 1354.975308][T25977] usb 2-1: Manufacturer: syz [ 1354.975324][T25977] usb 2-1: SerialNumber: syz [ 1354.983683][ T5684] rc_core: IR keymap rc-hauppauge not found [ 1354.983705][ T5684] Registered IR keymap rc-empty [ 1354.983871][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.006427][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.036797][ T5684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1355.052091][T25977] asix 2-1:2.88: probe with driver asix failed with error -22 [ 1355.054729][ T5684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input244 [ 1355.071034][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.076222][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.124539][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.145254][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.160158][T26769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.172232][T26769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.175315][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.204583][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.236296][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.262921][T26779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1355.264816][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.294971][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.324209][ T5684] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1355.353154][ T5684] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1355.353184][ T5684] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1355.392935][ T5684] usb 3-1: USB disconnect, device number 109 [ 1355.413246][ T8606] usb 2-1: USB disconnect, device number 24 [ 1356.023220][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1356.032770][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1356.033331][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1356.082827][T26789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6215'. [ 1356.167120][T25977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1356.288575][T26797] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1356.313810][T25977] usb 4-1: Using ep0 maxpacket: 32 [ 1356.314770][T25977] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1356.322536][T25977] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1356.322572][T25977] usb 4-1: config 0 has no interface number 0 [ 1356.322630][T25977] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1356.433951][T26798] bridge0: port 3(syz_tun) entered blocking state [ 1356.453060][T26798] bridge0: port 3(syz_tun) entered disabled state [ 1356.453490][T26798] syz_tun: entered allmulticast mode [ 1356.455967][T26798] syz_tun: entered promiscuous mode [ 1356.456912][T26798] bridge0: port 3(syz_tun) entered blocking state [ 1356.457057][T26798] bridge0: port 3(syz_tun) entered forwarding state [ 1356.468423][T26799] bridge0: port 4(ip6gretap0) entered blocking state [ 1356.468589][T26799] bridge0: port 4(ip6gretap0) entered disabled state [ 1356.468760][T26799] ip6gretap0: entered allmulticast mode [ 1356.568655][T25977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.568698][T25977] usb 4-1: Product: syz [ 1356.568724][T25977] usb 4-1: Manufacturer: syz [ 1356.568736][T25977] usb 4-1: SerialNumber: syz [ 1356.612595][T25977] usb 4-1: config 0 descriptor?? [ 1356.624815][T26799] ip6gretap0: entered promiscuous mode [ 1356.625515][T26799] bridge0: port 4(ip6gretap0) entered blocking state [ 1356.625620][T26799] bridge0: port 4(ip6gretap0) entered forwarding state [ 1356.663466][T26803] bridge0: port 5(veth1_to_bridge) entered blocking state [ 1356.663566][T26803] bridge0: port 5(veth1_to_bridge) entered disabled state [ 1356.663741][T26803] veth1_to_bridge: entered allmulticast mode [ 1356.665466][T26803] veth1_to_bridge: entered promiscuous mode [ 1356.665640][T26803] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1356.709853][T26803] bridge0: port 5(veth1_to_bridge) entered blocking state [ 1356.709944][T26803] bridge0: port 5(veth1_to_bridge) entered forwarding state [ 1356.959142][T18526] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1356.960381][T18526] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1356.965310][T18530] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1357.004633][T18526] usb 1-1: USB disconnect, device number 116 [ 1357.011617][T18530] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1357.011817][T18530] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1357.132195][T26814] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1357.162646][T26814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1357.474328][T11818] net_ratelimit: 26 callbacks suppressed [ 1357.474355][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1357.604324][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1357.642788][ T5684] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1357.717098][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1357.824015][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1357.846230][ T5684] usb 2-1: Using ep0 maxpacket: 16 [ 1357.847011][ T5684] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1357.848346][ T5684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.848397][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1357.848425][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1357.848447][ T5684] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1357.848469][ T5684] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1357.849654][ T5684] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1357.849679][ T5684] usb 2-1: Manufacturer: syz [ 1357.852422][ T5684] usb 2-1: config 0 descriptor?? [ 1357.938885][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1357.953888][ T8606] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1358.054049][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1358.121756][ T8606] usb 1-1: Using ep0 maxpacket: 32 [ 1358.135058][ T8606] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1358.142096][ T8606] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1358.142129][ T8606] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.142151][ T8606] usb 1-1: config 2 has no interface number 0 [ 1358.142196][ T8606] usb 1-1: config 2 interface 88 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1358.142228][ T8606] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1358.156706][ T8606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1358.156737][ T8606] usb 1-1: Product: syz [ 1358.156754][ T8606] usb 1-1: Manufacturer: syz [ 1358.156771][ T8606] usb 1-1: SerialNumber: syz [ 1358.164925][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1358.277929][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1358.283476][ T8606] asix 1-1:2.88: probe with driver asix failed with error -22 [ 1358.341079][T26834] bond1: option mode: unable to set because the bond device has slaves [ 1358.378542][T26834] netlink: 'syz.5.6226': attribute type 21 has an invalid length. [ 1358.395867][T26825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.399678][T26825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.477986][T18526] usb 1-1: USB disconnect, device number 117 [ 1358.535518][ T5684] rc_core: IR keymap rc-hauppauge not found [ 1358.535541][ T5684] Registered IR keymap rc-empty [ 1358.535751][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.757945][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.860743][ T5684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1358.887928][ T5684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input245 [ 1359.111458][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.238946][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.248388][T25977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1359.248425][T25977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1359.248447][T25977] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1359.248730][T25977] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1359.252764][T25977] usb 4-1: USB disconnect, device number 11 [ 1359.437628][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.504295][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.545498][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1359.568260][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.615883][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.675960][T25178] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1359.749724][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.801017][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.861565][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1359.913442][ T5684] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1360.001560][T26849] netlink: 'syz.2.6229': attribute type 1 has an invalid length. [ 1360.130826][T26849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.301418][T26850] bond0: (slave gretap1): making interface the new active one [ 1360.302335][T26850] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1360.308869][T26849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1360.540985][ T5684] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1360.541014][ T5684] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1360.881605][ T5684] usb 2-1: USB disconnect, device number 25 [ 1361.188090][T26873] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.188110][T26873] binder: 26871:26873 ioctl 4018620d 80000180 returned -16 [ 1361.188317][T26872] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.188329][T26872] binder: 26871:26872 ioctl 4018620d 80000180 returned -16 [ 1361.355994][T26876] binder: 26871:26876 ioctl 8933 80000100 returned -22 [ 1361.357520][T26876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.358004][T26876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.375517][T26877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.376010][T26877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.593453][T23999] net_ratelimit: 17 callbacks suppressed [ 1362.593480][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1363.522693][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.522759][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.809092][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1363.862335][T26893] syzkaller0: entered promiscuous mode [ 1363.862360][T26893] syzkaller0: entered allmulticast mode [ 1363.904535][T26893] tipc: Enabled bearer , priority 0 [ 1363.927612][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1364.005363][T26892] tipc: Resetting bearer [ 1364.265613][T25979] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1364.288495][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 1364.436077][T25979] usb 3-1: device descriptor read/64, error -32 [ 1364.693707][T25979] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1365.046047][T26892] tipc: Disabling bearer [ 1365.179332][T25977] tipc: Node number set to 4076837004 [ 1365.185457][T25979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1365.185514][T25979] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1365.186321][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1365.328154][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1365.424127][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1365.535889][T25979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.535923][T25979] usb 3-1: Product: syz [ 1365.535940][T25979] usb 3-1: Manufacturer: syz [ 1365.535957][T25979] usb 3-1: SerialNumber: syz [ 1365.537824][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1365.599977][T25979] usb 3-1: selecting invalid altsetting 1 [ 1365.600822][T25979] usb 3-1: unit 6 not found! [ 1365.664099][T26901] syzkaller0: entered promiscuous mode [ 1365.664125][T26901] syzkaller0: entered allmulticast mode [ 1365.982367][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1366.101051][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1366.295794][ T5684] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1366.504268][T11818] tipc: Subscription rejected, illegal request [ 1366.551758][T26914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.579485][T26914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.645658][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1366.930492][T25979] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1366.959365][T25979] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1366.962537][T25979] usb 3-1: selecting invalid altsetting 1 [ 1366.963363][T25979] usb 3-1: unit 6 not found! [ 1366.991757][T25979] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1367.021064][T25979] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1367.024437][T25979] usb 3-1: selecting invalid altsetting 1 [ 1367.025260][T25979] usb 3-1: unit 6 not found! [ 1367.047329][T25979] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1367.215594][T25979] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1367.241077][T25979] usb 3-1: USB disconnect, device number 111 [ 1367.436602][T26696] udevd[26696]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.486628][T26924] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6251'. [ 1367.675878][T11818] net_ratelimit: 8 callbacks suppressed [ 1367.675905][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1367.795954][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1367.915028][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.030063][T21837] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.144535][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.249018][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.361641][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.520347][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1368.599112][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.723573][T25183] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1368.730665][T26937] binder: 26931:26937 ioctl c0306201 80000680 returned -14 [ 1368.886255][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1369.019416][T26945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6260'. [ 1369.145023][T26948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.145538][T26948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.370524][T25184] net_ratelimit: 10 callbacks suppressed [ 1375.370552][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1375.507622][T11818] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1375.626621][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1375.730732][T23999] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1375.834801][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1375.966681][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1376.079205][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1376.583566][ C0] sched: DL replenish lagged too much [ 1376.944413][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1377.071715][T25186] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1377.189721][T25184] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1377.736686][T25979] hid_parser_main: 14 callbacks suppressed [ 1377.736715][T25979] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1377.753370][T25979] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1377.872658][T18530] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1378.105495][T18530] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1378.108178][T18530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.597668][T18530] usb 3-1: config 0 descriptor?? [ 1378.922172][T26966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.922645][T26966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.948378][T18530] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1379.192948][T18530] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1379.192978][T18530] [drm] Initialized udl on minor 1 [ 1379.379623][T25979] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1379.388468][T26966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.390875][T26966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.703241][T25979] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1379.815915][T25979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.819048][T25979] usb 1-1: config 0 descriptor?? [ 1379.874744][T25979] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1380.233950][T26993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6266'. [ 1380.368765][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.369505][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.370663][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.371198][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.372200][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.372679][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.373721][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.374427][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.388916][T26996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.389404][T26996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.605865][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1380.608656][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1380.610076][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1380.611171][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1380.611851][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1382.755630][ T52] Bluetooth: hci2: command tx timeout [ 1383.977301][ C1] net_ratelimit: 18 callbacks suppressed [ 1383.977327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.977869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.978345][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.978937][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.979405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.979955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.980433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.980916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.981414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.981901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1384.269550][T18530] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1384.327412][T18530] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1385.049662][ T52] Bluetooth: hci2: command tx timeout [ 1385.994209][T25979] gspca_stv06xx: I2C: Read error writing address: -110 [ 1387.331236][ T52] Bluetooth: hci2: command tx timeout [ 1388.991891][ C1] net_ratelimit: 7337 callbacks suppressed [ 1388.991918][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1388.992551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.993180][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.993793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1388.994380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.994957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.995543][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1388.996125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.996808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.997382][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1389.662544][ T5633] Bluetooth: hci2: command tx timeout [ 1392.554760][T18526] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1394.000054][ C1] net_ratelimit: 6999 callbacks suppressed [ 1394.000082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.000705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.001332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1394.001977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.002557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.003164][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1394.003741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.004309][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1394.004915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1394.005486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.028702][ C1] net_ratelimit: 7705 callbacks suppressed [ 1399.028727][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1399.029271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.030060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.030611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1399.031197][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.031718][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.032249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1399.032829][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.033361][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1399.033873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1404.038900][ C1] net_ratelimit: 4483 callbacks suppressed [ 1404.038927][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.039546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1404.041354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.041953][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.042541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1404.044333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.045537][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.046133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1404.048046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1404.048676][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.052628][ C1] net_ratelimit: 4247 callbacks suppressed [ 1409.052654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.053586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1409.055453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.056013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.056625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1409.058427][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.059001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.059540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1409.061317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1409.061859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.076234][ C1] net_ratelimit: 4396 callbacks suppressed [ 1414.076260][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.076861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.077377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1414.079145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.079663][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.080189][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1414.081957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.082473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.083003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1414.084750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1414.709053][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1418.972415][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1419.107153][ C1] net_ratelimit: 4363 callbacks suppressed [ 1419.107180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1419.108987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.109558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.110088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1419.111913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.112450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.112978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1419.114761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.115339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.115886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1424.130738][ C1] net_ratelimit: 4539 callbacks suppressed [ 1424.130763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1424.131281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1424.131850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1424.133561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1424.134085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1424.134650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1424.136363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1424.137079][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1424.137614][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1424.139325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.380186][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.401405][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.159817][ C1] net_ratelimit: 4346 callbacks suppressed [ 1429.159844][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1429.160398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1429.161094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1429.163002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1429.163551][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1429.164125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1429.166035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1429.166621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1429.167184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1429.169144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.191004][ C1] net_ratelimit: 4226 callbacks suppressed [ 1434.191031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.191642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.192155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1434.193853][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.194410][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.194984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1434.196696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.197220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1434.197780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1434.199754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.222476][ C1] net_ratelimit: 4280 callbacks suppressed [ 1439.222503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.223111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.223638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1439.225353][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.225877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.226568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1439.228310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.228830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1439.229415][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1439.231229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.246709][ C1] net_ratelimit: 4261 callbacks suppressed [ 1444.246736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1444.248530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.249595][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.250185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1444.252003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.252533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.253054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1444.254787][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.255355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1444.255876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1449.257793][ C1] net_ratelimit: 4263 callbacks suppressed [ 1449.257821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1449.258399][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1449.259111][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1449.260995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1449.261614][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1449.262201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1449.264216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1449.264799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1449.265387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1449.267423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.276331][ C1] net_ratelimit: 4102 callbacks suppressed [ 1454.276356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1454.278154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.278725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.279310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1454.281148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.281745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.282344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1454.284176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.284733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1454.285835][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1459.285149][ C1] net_ratelimit: 4062 callbacks suppressed [ 1459.285175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.285761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.286472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1459.288411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.288981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.289564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1459.291545][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.292119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1459.292732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1459.294730][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.313082][ C1] net_ratelimit: 4175 callbacks suppressed [ 1464.313123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.313751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.314326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1464.316254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.316847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.317534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1464.319479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.320075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.320700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1464.322585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.329551][ C1] net_ratelimit: 4194 callbacks suppressed [ 1469.329577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.330153][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1469.331900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.332547][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.333091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1469.335585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.336128][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.336670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1469.338514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1469.339054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.352254][ C1] net_ratelimit: 4151 callbacks suppressed [ 1474.352296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.352883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1474.354972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.355548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.356129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1474.358570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.359206][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.359805][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1474.361671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.362326][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.365677][ C1] net_ratelimit: 4269 callbacks suppressed [ 1479.365703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1479.368250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.368830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.369416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1479.371456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.372039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.372612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1479.374613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.375197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.375764][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1484.397538][ C1] net_ratelimit: 4164 callbacks suppressed [ 1484.397563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.398138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.398718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1484.400618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.401181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.401768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1484.404232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.404806][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.405358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1484.407277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.425500][ C1] net_ratelimit: 4160 callbacks suppressed [ 1489.425528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.426153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.426734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1489.428748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.429374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.430027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1489.431988][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.432698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.433387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1489.435513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.546370][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.569004][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.451273][ C1] net_ratelimit: 4189 callbacks suppressed [ 1494.451299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1494.453251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.453788][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.454344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1494.456167][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.456725][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.457291][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1494.459178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.459818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.460375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1498.036520][ T52] Bluetooth: hci1: command tx timeout [ 1499.509467][ C1] net_ratelimit: 4127 callbacks suppressed [ 1499.509494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1499.511247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.511798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.512337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1499.514176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.514732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.515262][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1499.517104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.517657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.518185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1504.533011][ C1] net_ratelimit: 4206 callbacks suppressed [ 1504.533038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.533678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.534323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1504.536204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.536829][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.537423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1504.539420][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.540018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.540634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1504.542515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.536200][ C1] net_ratelimit: 4139 callbacks suppressed [ 1509.536227][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.536821][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.537459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1509.539445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.540037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.540672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1509.542606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.543186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.543777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1509.545792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.559029][ C1] net_ratelimit: 3909 callbacks suppressed [ 1514.559056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.559655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1514.561613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.562245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.562882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1514.564762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.565440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.566026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1514.567959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1514.568549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.586907][ C1] net_ratelimit: 4255 callbacks suppressed [ 1519.586933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.587526][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.588113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1519.590110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.590704][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.591287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1519.593300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.593899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1519.594592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1519.599755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.605602][ C1] net_ratelimit: 4134 callbacks suppressed [ 1524.605628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.606216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1524.608229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.608795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.609383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1524.611337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.611919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.612495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1524.614540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1524.615231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.623934][ C1] net_ratelimit: 4102 callbacks suppressed [ 1529.623962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.624568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.625225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1529.627359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.628045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.628647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1529.630624][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.631218][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.631939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1529.633920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1529.770396][ T32] INFO: task kworker/u8:33:25183 blocked for more than 148 seconds. [ 1529.770428][ T32] Tainted: G L syzkaller #0 [ 1529.770443][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1529.770454][ T32] task:kworker/u8:33 state:D stack:21960 pid:25183 tgid:25183 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1529.770520][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 1529.770565][ T32] Call Trace: [ 1529.770574][ T32] [ 1529.770590][ T32] __schedule+0x17db/0x58f0 [ 1529.770644][ T32] ? ret_from_fork_asm+0x1a/0x30 [ 1529.770679][ T32] ? unwind_next_frame+0x8f/0x2550 [ 1529.770719][ T32] ? __pfx___schedule+0x10/0x10 [ 1529.770764][ T32] ? schedule+0x90/0x2b0 [ 1529.770813][ T32] schedule+0x164/0x2b0 [ 1529.770852][ T32] schedule_preempt_disabled+0x13/0x30 [ 1529.770874][ T32] __mutex_lock+0x7c1/0x1550 [ 1529.770905][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1529.770935][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 1529.770961][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1529.771009][ T32] addrconf_dad_work+0x116/0x15c0 [ 1529.771043][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1529.771076][ T32] ? rcu_is_watching+0x16/0xb0 [ 1529.771107][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1529.771140][ T32] process_scheduled_works+0xc3d/0x1630 [ 1529.771204][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1529.771243][ T32] ? assign_work+0x3cf/0x5d0 [ 1529.771279][ T32] worker_thread+0xa47/0xfb0 [ 1529.771333][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1529.771378][ T32] kthread+0x38b/0x480 [ 1529.771401][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1529.771431][ T32] ? __pfx_kthread+0x10/0x10 [ 1529.771455][ T32] ret_from_fork+0x514/0xb70 [ 1529.771481][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1529.771517][ T32] ? __switch_to+0xc89/0x1420 [ 1529.771552][ T32] ? __pfx_kthread+0x10/0x10 [ 1529.771577][ T32] ret_from_fork_asm+0x1a/0x30 [ 1529.771629][ T32] [ 1529.771670][ T32] INFO: task syz.5.6266:26993 blocked for more than 148 seconds. [ 1529.771690][ T32] Tainted: G L syzkaller #0 [ 1529.771703][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1529.771713][ T32] task:syz.5.6266 state:D stack:26304 pid:26993 tgid:26964 ppid:19674 task_flags:0x400140 flags:0x08080002 [ 1529.771781][ T32] Call Trace: [ 1529.771807][ T32] [ 1529.771822][ T32] __schedule+0x17db/0x58f0 [ 1529.771875][ T32] ? __pfx__printk+0x10/0x10 [ 1529.771908][ T32] ? __pfx___schedule+0x10/0x10 [ 1529.771954][ T32] ? schedule+0x90/0x2b0 [ 1529.771993][ T32] schedule+0x164/0x2b0 [ 1529.772030][ T32] schedule_preempt_disabled+0x13/0x30 [ 1529.772053][ T32] __mutex_lock+0x7c1/0x1550 [ 1529.772084][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1529.772113][ T32] ? nl80211_pre_doit+0x5e/0x890 [ 1529.772146][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1529.772172][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1529.772210][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1529.772236][ T32] ? __nla_parse+0x40/0x60 [ 1529.772273][ T32] nl80211_pre_doit+0x5e/0x890 [ 1529.772307][ T32] genl_family_rcv_msg_doit+0x1db/0x340 [ 1529.772340][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1529.772381][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1529.772402][ T32] ? security_capable+0x7e/0x2c0 [ 1529.772437][ T32] genl_rcv_msg+0x614/0x7a0 [ 1529.772469][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1529.772493][ T32] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1529.772521][ T32] ? __pfx_nl80211_connect+0x10/0x10 [ 1529.772543][ T32] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1529.772576][ T32] ? __asan_memcpy+0x40/0x70 [ 1529.772610][ T32] ? __skb_clone+0x5c/0x6c0 [ 1529.772647][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1529.772682][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1529.772710][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1529.772759][ T32] ? down_read+0x2be/0x330 [ 1529.772804][ T32] genl_rcv+0x28/0x40 [ 1529.772828][ T32] netlink_unicast+0x7bd/0x940 [ 1529.772870][ T32] netlink_sendmsg+0x813/0xb40 [ 1529.772914][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1529.772957][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1529.772986][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1529.773018][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1529.773059][ T32] ____sys_sendmsg+0x54e/0x850 [ 1529.773096][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1529.773133][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 1529.773176][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1529.773204][ T32] ? __lock_acquire+0x747/0x2de0 [ 1529.773234][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1529.773268][ T32] ? futex_wait+0x2a2/0x390 [ 1529.773334][ T32] ? __fget_files+0x2a/0x420 [ 1529.773365][ T32] ? __fget_files+0x3a2/0x420 [ 1529.773408][ T32] __sys_sendmsg+0x177/0x240 [ 1529.773440][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1529.798809][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1529.798854][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1529.798881][ T32] ? asm_int80_emulation+0x1a/0x20 [ 1529.798905][ T32] ? do_int80_emulation+0x299/0x500 [ 1529.798931][ T32] ? trace_irq_disable+0x3b/0x140 [ 1529.798959][ T32] do_fast_syscall_32+0x33/0x70 [ 1529.798987][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.799016][ T32] RIP: 0023:0xf7f050ec [ 1529.799037][ T32] RSP: 002b:00000000f42f850c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1529.799064][ T32] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 1529.799081][ T32] RDX: 000000000000c090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.799096][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.799111][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.799125][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.799160][ T32] [ 1529.799173][ T32] INFO: task syz.0.6269:26977 blocked for more than 149 seconds. [ 1529.799194][ T32] Tainted: G L syzkaller #0 [ 1529.799208][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1529.799219][ T32] task:syz.0.6269 state:D stack:27880 pid:26977 tgid:26976 ppid:26185 task_flags:0x400040 flags:0x08080002 [ 1529.799290][ T32] Call Trace: [ 1529.799299][ T32] [ 1529.799314][ T32] __schedule+0x17db/0x58f0 [ 1529.799380][ T32] ? __pfx___schedule+0x10/0x10 [ 1529.799426][ T32] ? schedule+0x90/0x2b0 [ 1529.799465][ T32] schedule+0x164/0x2b0 [ 1529.799503][ T32] schedule_preempt_disabled+0x13/0x30 [ 1529.799525][ T32] __mutex_lock+0x7c1/0x1550 [ 1529.799550][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1529.799588][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1529.799617][ T32] ? dev_ethtool+0x3a0/0x29c0 [ 1529.799644][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1529.799677][ T32] ? dev_get_by_name+0x21/0x200 [ 1529.799709][ T32] ? dev_get_by_name+0x21/0x200 [ 1529.799752][ T32] dev_ethtool+0x3a0/0x29c0 [ 1529.799775][ T32] ? __lock_acquire+0x747/0x2de0 [ 1529.799817][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1529.799846][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1529.799871][ T32] ? __pfx_dev_ethtool+0x10/0x10 [ 1529.799898][ T32] ? do_vfs_ioctl+0x116f/0x1530 [ 1529.799928][ T32] ? lock_acquire+0x115/0x350 [ 1529.799962][ T32] ? dev_load+0x21/0x1f0 [ 1529.799990][ T32] ? dev_load+0x21/0x1f0 [ 1529.800018][ T32] dev_ioctl+0x392/0x1150 [ 1529.800050][ T32] compat_sock_ioctl+0xc60/0xcc0 [ 1529.800092][ T32] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1529.800130][ T32] ? __fget_files+0x3a2/0x420 [ 1529.800161][ T32] ? __fget_files+0x2a/0x420 [ 1529.800197][ T32] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1529.800234][ T32] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1529.800265][ T32] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1529.800298][ T32] ? __se_sys_futex_time32+0x3ab/0x440 [ 1529.800340][ T32] ? rcu_is_watching+0x16/0xb0 [ 1529.800382][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1529.800410][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1529.800436][ T32] ? asm_int80_emulation+0x1a/0x20 [ 1529.800458][ T32] ? do_int80_emulation+0x299/0x500 [ 1529.800484][ T32] ? trace_irq_disable+0x3b/0x140 [ 1529.800513][ T32] do_fast_syscall_32+0x33/0x70 [ 1529.800540][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.800568][ T32] RIP: 0023:0xf70cf0ec [ 1529.800588][ T32] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1529.800612][ T32] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000008946 [ 1529.800628][ T32] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.800644][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.800658][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.800673][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.800706][ T32] [ 1529.800716][ T32] INFO: task syz.0.6269:26991 blocked for more than 149 seconds. [ 1529.800735][ T32] Tainted: G L syzkaller #0 [ 1529.800746][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1529.800776][ T32] task:syz.0.6269 state:D stack:28808 pid:26991 tgid:26976 ppid:26185 task_flags:0x400040 flags:0x08080002 [ 1529.800856][ T32] Call Trace: [ 1529.800864][ T32] [ 1529.800878][ T32] __schedule+0x17db/0x58f0 [ 1529.800950][ T32] ? __pfx___schedule+0x10/0x10 [ 1529.800996][ T32] ? schedule+0x90/0x2b0 [ 1529.801034][ T32] schedule+0x164/0x2b0 [ 1529.801072][ T32] schedule_preempt_disabled+0x13/0x30 [ 1529.801095][ T32] __mutex_lock+0x7c1/0x1550 [ 1529.801125][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1529.801155][ T32] ? __tun_chr_ioctl+0x3da/0x1e70 [ 1529.801184][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1529.801231][ T32] __tun_chr_ioctl+0x3da/0x1e70 [ 1529.801269][ T32] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1529.801294][ T32] ? __fget_files+0x2a/0x420 [ 1529.801436][ T32] ? __fget_files+0x3a2/0x420 [ 1529.801475][ T32] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1529.801513][ T32] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1529.801543][ T32] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1529.801577][ T32] ? __se_sys_futex_time32+0x3ab/0x440 [ 1529.801617][ T32] ? rcu_is_watching+0x16/0xb0 [ 1529.801660][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1529.801691][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1529.801718][ T32] ? irqentry_exit+0x10f/0x910 [ 1529.801741][ T32] ? trace_irq_disable+0x3b/0x140 [ 1529.801771][ T32] do_fast_syscall_32+0x33/0x70 [ 1529.801820][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.801850][ T32] RIP: 0023:0xf70cf0ec [ 1529.801872][ T32] RSP: 002b:00000000f549c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1529.801898][ T32] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400454ca [ 1529.801916][ T32] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.801932][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.801946][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.801962][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.801995][ T32] [ 1529.802010][ T32] INFO: task syz-executor:27003 blocked for more than 149 seconds. [ 1529.802032][ T32] Tainted: G L syzkaller #0 [ 1529.802046][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1529.802058][ T32] task:syz-executor state:D stack:27600 pid:27003 tgid:27003 ppid:26988 task_flags:0x400140 flags:0x08080000 [ 1529.802127][ T32] Call Trace: [ 1529.802137][ T32] [ 1529.802151][ T32] __schedule+0x17db/0x58f0 [ 1529.802207][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1529.802246][ T32] ? __pfx___schedule+0x10/0x10 [ 1529.802291][ T32] ? schedule+0x90/0x2b0 [ 1529.802330][ T32] schedule+0x164/0x2b0 [ 1529.802369][ T32] schedule_preempt_disabled+0x13/0x30 [ 1529.802392][ T32] __mutex_lock+0x7c1/0x1550 [ 1529.802424][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1529.802456][ T32] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1529.802488][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1529.802525][ T32] ? net_generic+0x1e/0x240 [ 1529.802557][ T32] ? net_generic+0x1e/0x240 [ 1529.802594][ T32] register_netdevice_notifier_net+0x1a/0xa0 [ 1529.802624][ T32] ops_init+0x35d/0x5d0 [ 1529.802661][ T32] setup_net+0x118/0x350 [ 1529.802690][ T32] ? __pfx_setup_net+0x10/0x10 [ 1529.802716][ T32] ? down_read_killable+0x1bb/0x3b0 [ 1529.802746][ T32] ? __ns_common_init+0x2fc/0x4a0 [ 1529.802794][ T32] copy_net_ns+0x53b/0x780 [ 1529.802825][ T32] create_new_namespaces+0x3f0/0x6b0 [ 1529.802859][ T32] ? security_capable+0x7e/0x2c0 [ 1529.802894][ T32] unshare_nsproxy_namespaces+0x149/0x190 [ 1529.802929][ T32] ksys_unshare+0x5a7/0x950 [ 1529.802971][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 1529.803007][ T32] ? fput_close_sync+0x11f/0x240 [ 1529.803039][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 1529.803080][ T32] __ia32_sys_unshare+0x37/0x40 [ 1529.803114][ T32] __do_fast_syscall_32+0x27a/0x6a0 [ 1529.803143][ T32] ? do_fast_syscall_32+0x33/0x70 [ 1529.803171][ T32] ? asm_int80_emulation+0x1a/0x20 [ 1529.803194][ T32] ? do_int80_emulation+0x299/0x500 [ 1529.803220][ T32] ? trace_irq_disable+0x3b/0x140 [ 1529.803248][ T32] do_fast_syscall_32+0x33/0x70 [ 1529.803277][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.803307][ T32] RIP: 0023:0xf6fcf0ec [ 1529.803328][ T32] RSP: 002b:00000000f74eff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1529.803353][ T32] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1529.803369][ T32] RDX: 00000000f7398ff4 RSI: 00000000f71d31c2 RDI: 0000000030000000 [ 1529.803386][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.803400][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.803414][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.803449][ T32] [ 1529.820407][ T32] [ 1529.820407][ T32] Showing all locks held in the system: [ 1529.820425][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 1529.820445][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1529.820511][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1529.820572][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#0: [ 1529.820588][ T32] #0: ffffffff8ebf9220 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 1529.820653][ T32] locks held by kworker/R-mm_pe/14: 1, last CPU#1: [ 1529.820671][ T32] #0: ffffffff8ebf9220 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 1529.820736][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1529.820753][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1529.820824][ T32] locks held by kworker/1:0/25: 4, on CPU#1: [ 1529.820840][ T32] #0: ffff888031b59d40 ((wq_completion)wg-kex-wg2#28){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.820909][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.820988][ T32] #2: ffff88807c6fd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 1529.821057][ T32] #3: ffff88803345aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 1529.821125][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1529.821142][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1529.821196][ T32] locks held by kworker/u8:2/34: 4, last CPU#0: [ 1529.821213][ T32] #0: ffff888053faa940 ((wq_completion)wg-kex-wg1#25){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.821280][ T32] #1: ffffc90000aa7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.821350][ T32] #2: ffff888051911440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1529.821422][ T32] #3: ffff888020bb5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1529.821492][ T32] locks held by kworker/u9:0/52: 5, on CPU#1: [ 1529.821509][ T32] #0: ffff88802e774140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.821570][ T32] #1: ffffc90000bd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.821632][ T32] #2: ffff888052e24ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1529.821698][ T32] #3: ffff888052e240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1529.821758][ T32] #4: ffffffff903d8b00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1529.821829][ T32] locks held by kworker/u8:4/59: 3, last CPU#0: [ 1529.821846][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.821907][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.821971][ T32] #2: ffff888070e9f258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1529.822047][ T32] locks held by kworker/u8:7/152: 4, on CPU#0: [ 1529.822068][ T32] #0: ffff8880349b1940 ((wq_completion)wg-kex-wg2#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822141][ T32] #1: ffffc90002e47c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822204][ T32] #2: ffff88802bb4d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1529.822271][ T32] #3: ffff8880289d7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1529.822341][ T32] locks held by kworker/u8:10/1173: 4, last CPU#0: [ 1529.822357][ T32] #0: ffff88804095c140 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822420][ T32] #1: ffffc900052cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822481][ T32] #2: ffff888053721440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1529.822544][ T32] #3: ffff88807d3f0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1529.822611][ T32] locks held by kworker/0:2/1221: 2, last CPU#0: [ 1529.822627][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822689][ T32] #1: ffffc9000566fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822766][ T32] locks held by kworker/R-krxrp/3211: 1, on CPU#0: [ 1529.822790][ T32] #0: ffffffff8ebf9220 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 1529.822855][ T32] locks held by kworker/u8:11/3326: 3, last CPU#1: [ 1529.822871][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822930][ T32] #1: ffffc9000eb77c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1529.822992][ T32] #2: ffff88807097e258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1529.823063][ T32] locks held by klogd/4975: 1, last CPU#1: [ 1529.823079][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1529.823133][ T32] locks held by udevd/4986: 2, last CPU#1: [ 1529.823150][ T32] #0: ffffffff8f4f0b78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1529.823205][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1529.823263][ T32] locks held by dhcpcd/5280: 1, last CPU#0: [ 1529.823279][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1529.823346][ T32] locks held by dhcpcd/5281: 2, last CPU#1: [ 1529.823362][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1529.823415][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1534.626812][ C1] net_ratelimit: 4046 callbacks suppressed [ 1534.626838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1534.627495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1534.628100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1534.630018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1534.630580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1534.631305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1534.633203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1534.633896][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1534.634481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1534.636786][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1539.661618][ C1] net_ratelimit: 4294 callbacks suppressed [ 1539.661646][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1539.662280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1539.662888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1539.664883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1539.665560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1539.666172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1539.666746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1539.668763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1539.669321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1539.669900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1544.692238][ C1] net_ratelimit: 4837 callbacks suppressed [ 1544.692265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1544.692772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1544.693302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1544.693858][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1544.695592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1544.696113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1544.696652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1544.697217][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1544.698958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1544.699491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1549.708726][ C1] net_ratelimit: 4902 callbacks suppressed [ 1549.708753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1549.709279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1549.709808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1549.710330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1549.712062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1549.712621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1549.713579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1549.714128][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1549.715962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1549.716493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1554.714925][ C1] net_ratelimit: 4673 callbacks suppressed [ 1554.714950][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.717078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.717773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1554.718381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.718998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.721060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.721700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:ac:97:72:5f:f6, vlan:0) [ 1554.722285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1554.722998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1554.725104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.756490][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.789851][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.054836][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1558.974886][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1562.704204][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25904/1:b..l [ 1562.712264][ C1] rcu: (detected by 1, t=10873 jiffies, g=247725, q=1092 ncpus=2) [ 1562.720217][ C1] task:syz-executor state:R running task stack:22280 pid:25904 tgid:25904 ppid:25897 task_flags:0x400140 flags:0x08080000 [ 1562.733866][ C1] Call Trace: [ 1562.737186][ C1] [ 1562.740182][ C1] __schedule+0x17db/0x58f0 [ 1562.744790][ C1] ? __lock_acquire+0x747/0x2de0 [ 1562.749808][ C1] ? __pfx___schedule+0x10/0x10 [ 1562.754769][ C1] preempt_schedule_irq+0x4b/0x90 [ 1562.759939][ C1] irqentry_exit+0x14f/0x910 [ 1562.764577][ C1] ? trace_irq_disable+0x3b/0x140 [ 1562.769672][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1562.775728][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 1562.780855][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 1562.800874][ C1] RSP: 0018:ffffc900072772b8 EFLAGS: 00000202 [ 1562.807007][ C1] RAX: 0000000000000000 RBX: ffffc900072773b8 RCX: 0000000000000001 [ 1562.815126][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900072773b8 [ 1562.823166][ C1] RBP: 1ffffffff2240cd9 R08: ffffc900072773c7 R09: 0000000000000000 [ 1562.831182][ C1] R10: ffffc900072773b8 R11: fffff52000e4ee79 R12: dffffc0000000000 [ 1562.839199][ C1] R13: ffffffff912066c8 R14: ffffc90007277368 R15: ffffc900072773b0 [ 1562.847236][ C1] unwind_next_frame+0xd04/0x2550 [ 1562.852321][ C1] ? qlist_free_all+0x99/0x100 [ 1562.857143][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1562.862427][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1562.868624][ C1] arch_stack_walk+0x11b/0x150 [ 1562.873459][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1562.879535][ C1] stack_trace_save+0xa9/0x100 [ 1562.884533][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1562.889961][ C1] ? __lock_acquire+0x747/0x2de0 [ 1562.894955][ C1] save_stack+0x122/0x230 [ 1562.899362][ C1] ? __pfx_save_stack+0x10/0x10 [ 1562.904282][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 1562.909623][ C1] ? __slab_free+0x274/0x2c0 [ 1562.914268][ C1] ? qlist_free_all+0x99/0x100 [ 1562.919090][ C1] ? page_ext_put+0x97/0xc0 [ 1562.923641][ C1] __reset_page_owner+0x71/0x1f0 [ 1562.928716][ C1] __free_frozen_pages+0xc93/0xd90 [ 1562.933927][ C1] __slab_free+0x274/0x2c0 [ 1562.938389][ C1] ? lock_acquire+0x115/0x350 [ 1562.943202][ C1] ? qlist_free_all+0x8e/0x100 [ 1562.948008][ C1] qlist_free_all+0x99/0x100 [ 1562.952639][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1562.958152][ C1] __kasan_slab_alloc+0x22/0x80 [ 1562.963057][ C1] __kmalloc_noprof+0x307/0x720 [ 1562.967963][ C1] ? rcu_is_watching+0x16/0xb0 [ 1562.972802][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 1562.977886][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 1562.983666][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 1562.989492][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 1562.995110][ C1] tomoyo_path_perm+0x283/0x560 [ 1563.000023][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1563.005097][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1563.010546][ C1] ? __lock_acquire+0x747/0x2de0 [ 1563.015540][ C1] ? __ia32_compat_sys_openat+0x131/0x160 [ 1563.021315][ C1] security_inode_getattr+0x12b/0x310 [ 1563.026769][ C1] do_statx_fd+0x14e/0x3b0 [ 1563.031234][ C1] ? __pfx_do_statx_fd+0x10/0x10 [ 1563.036240][ C1] ? __might_fault+0xaf/0x130 [ 1563.041066][ C1] ? __getname_maybe_null+0x95/0x210 [ 1563.046407][ C1] __se_sys_statx+0x146/0x2a0 [ 1563.051141][ C1] ? do_sys_openat2+0x14e/0x200 [ 1563.056057][ C1] ? kmem_cache_free+0x182/0x650 [ 1563.061063][ C1] ? __pfx___se_sys_statx+0x10/0x10 [ 1563.066333][ C1] ? do_sys_openat2+0x14e/0x200 [ 1563.071259][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1563.076552][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1563.081900][ C1] ? rcu_is_watching+0x16/0xb0 [ 1563.086726][ C1] ? __ia32_sys_statx+0x20/0xc0 [ 1563.091643][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 1563.096907][ C1] ? do_fast_syscall_32+0x33/0x70 [ 1563.101999][ C1] ? asm_int80_emulation+0x1a/0x20 [ 1563.107203][ C1] ? do_int80_emulation+0x299/0x500 [ 1563.112457][ C1] ? trace_irq_disable+0x3b/0x140 [ 1563.117651][ C1] do_fast_syscall_32+0x33/0x70 [ 1563.122556][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.128942][ C1] RIP: 0023:0xf7f530ec [ 1563.133058][ C1] RSP: 002b:00000000f753fb20 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 1563.141521][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f723f7ad [ 1563.149540][ C1] RDX: 0000000000001800 RSI: 00000000000007ff RDI: 00000000f753fbbc [ 1563.157557][ C1] RBP: 00000000f753fd10 R08: 0000000000000000 R09: 0000000000000000 [ 1563.165659][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1563.173677][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.181721][ C1] [ 1563.184782][ C1] rcu: rcu_preempt kthread starved for 1535 jiffies! g247725 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1563.195840][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1563.206212][ C1] rcu: RCU grace-period kthread stack dump: [ 1563.212155][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1563.225762][ C1] Call Trace: [ 1563.229084][ C1] [ 1563.232049][ C1] __schedule+0x17db/0x58f0 [ 1563.236618][ C1] ? __lock_acquire+0x747/0x2de0 [ 1563.241622][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1563.246805][ C1] ? __pfx___schedule+0x10/0x10 [ 1563.251710][ C1] ? lock_acquire+0x115/0x350 [ 1563.256457][ C1] ? schedule+0x90/0x2b0 [ 1563.260778][ C1] schedule+0x164/0x2b0 [ 1563.264996][ C1] schedule_timeout+0x152/0x2c0 [ 1563.269907][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1563.275327][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1563.280763][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1563.286623][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1563.292223][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1563.297230][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1563.303615][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1563.308952][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1563.314218][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1563.320083][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1563.324757][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1563.330000][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1563.335348][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1563.340476][ C1] kthread+0x38b/0x480 [ 1563.344594][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1563.349836][ C1] ? __pfx_kthread+0x10/0x10 [ 1563.354470][ C1] ret_from_fork+0x514/0xb70 [ 1563.359101][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.364288][ C1] ? __switch_to+0xc89/0x1420 [ 1563.369050][ C1] ? __pfx_kthread+0x10/0x10 [ 1563.373679][ C1] ret_from_fork_asm+0x1a/0x30 [ 1563.378526][ C1] [ 1563.381585][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1563.387937][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1563.393186][ C0] NMI backtrace for cpu 0 [ 1563.393208][ C0] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.393234][ C0] Tainted: [L]=SOFTLOCKUP [ 1563.393248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1563.393260][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 1563.393295][ C0] Code: 8b 3d d4 c5 ac 0c 48 89 de 5b e9 73 7e 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 68 15 cd 11 65 48 8b 15 68 15 cd 11 f7 c2 00 01 00 ff [ 1563.393314][ C0] RSP: 0018:ffffc90000007058 EFLAGS: 00000246 [ 1563.393333][ C0] RAX: ffffffff89b14cc7 RBX: 1ffff110111ae801 RCX: ffff88801dadbe80 [ 1563.393349][ C0] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1563.393361][ C0] RBP: ffff888033447901 R08: 0000000000000100 R09: 1ffff11006688f32 [ 1563.393393][ C0] R10: dffffc0000000000 R11: ffffed1006688f33 R12: 0000000000000000 [ 1563.393407][ C0] R13: 0000000000000000 R14: ffff888088d743c0 R15: dffffc0000000000 [ 1563.393422][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1563.393439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.393456][ C0] CR2: 00000000f3ea0218 CR3: 0000000012242000 CR4: 00000000003526f0 [ 1563.393473][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1563.393486][ C0] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1563.393499][ C0] Call Trace: [ 1563.393507][ C0] [ 1563.393515][ C0] dev_hard_start_xmit+0x7c7/0x830 [ 1563.393553][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1563.393580][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1563.393608][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1563.393631][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1563.393657][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1563.393687][ C0] ? arch_stack_walk+0x11b/0x150 [ 1563.393712][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1563.393743][ C0] ? __lock_acquire+0x747/0x2de0 [ 1563.393767][ C0] ? skb_clone+0x212/0x3a0 [ 1563.393792][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1563.393825][ C0] ? br_nf_post_routing+0x110/0xee0 [ 1563.393859][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1563.393884][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1563.393908][ C0] NF_HOOK+0x360/0x3f0 [ 1563.393929][ C0] ? net_generic+0x1e/0x240 [ 1563.393956][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1563.393978][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1563.394002][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1563.394033][ C0] br_forward_finish+0xd3/0x130 [ 1563.394055][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1563.394079][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1563.394103][ C0] NF_HOOK+0x360/0x3f0 [ 1563.394127][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1563.394149][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1563.394173][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1563.394195][ C0] ? skb_clone+0x246/0x3a0 [ 1563.394222][ C0] ? br_flood+0x623/0x8d0 [ 1563.394255][ C0] ? br_handle_vlan+0x5e/0x530 [ 1563.394278][ C0] __br_forward+0x397/0x540 [ 1563.394301][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1563.394327][ C0] br_handle_frame_finish+0x1119/0x1950 [ 1563.394361][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1563.394387][ C0] ? net_generic+0x1e/0x240 [ 1563.394415][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 1563.394448][ C0] br_handle_frame+0x81b/0x1510 [ 1563.394479][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1563.394508][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1563.394536][ C0] ? __netif_receive_skb_core+0x2b62/0x30c0 [ 1563.394566][ C0] ? kmem_cache_free+0x182/0x650 [ 1563.394589][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1563.394615][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 1563.394656][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1563.394689][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1563.394715][ C0] ? lock_acquire+0x115/0x350 [ 1563.394739][ C0] ? process_backlog+0x3de/0x18b0 [ 1563.394759][ C0] ? process_backlog+0x3de/0x18b0 [ 1563.394781][ C0] process_backlog+0x727/0x18b0 [ 1563.394804][ C0] ? process_backlog+0x3de/0x18b0 [ 1563.394831][ C0] __napi_poll+0xaa/0x330 [ 1563.394851][ C0] net_rx_action+0x61d/0xf50 [ 1563.394878][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1563.394915][ C0] handle_softirqs+0x226/0x860 [ 1563.394943][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1563.394972][ C0] __irq_exit_rcu+0xcb/0x220 [ 1563.394998][ C0] irq_exit_rcu+0x9/0x30 [ 1563.395021][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1563.395040][ C0] [ 1563.395048][ C0] [ 1563.395055][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1563.395077][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1563.395109][ C0] Code: f7 e8 8d 23 bc f5 f7 c3 00 02 00 00 74 05 e8 30 67 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 32 ad f5 65 48 8b 05 0c 31 ad 07 48 85 c0 74 18 5b 41 5e e9 [ 1563.395126][ C0] RSP: 0018:ffffc900000775e8 EFLAGS: 00000206 [ 1563.395143][ C0] RAX: 0000000000000002 RBX: 0000000000000296 RCX: 8000000000000001 [ 1563.395157][ C0] RDX: 0000000000000007 RSI: ffffffff8e475f59 RDI: 0000000000000001 [ 1563.395170][ C0] RBP: ffff888021ed74c8 R08: ffffffff907a2b7f R09: 1ffffffff20f456f [ 1563.395185][ C0] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: 0000000000000000 [ 1563.395199][ C0] R13: ffff888088d4c000 R14: ffffffff9ac2ed90 R15: 0000000000000000 [ 1563.395223][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 1563.395264][ C0] __free_frozen_pages+0x5cc/0xd90 [ 1563.395300][ C0] __slab_free+0x274/0x2c0 [ 1563.395326][ C0] qlist_free_all+0x99/0x100 [ 1563.395347][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1563.395368][ C0] __kasan_slab_alloc+0x22/0x80 [ 1563.395391][ C0] __kmalloc_cache_noprof+0x29f/0x600 [ 1563.395410][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1563.395428][ C0] ? set_kthread_struct+0xbb/0x340 [ 1563.395454][ C0] ? set_kthread_struct+0xbb/0x340 [ 1563.395484][ C0] set_kthread_struct+0xbb/0x340 [ 1563.395510][ C0] ? __asan_memset+0x22/0x50 [ 1563.395541][ C0] copy_process+0x17c7/0x43e0 [ 1563.395571][ C0] ? copy_process+0xd3c/0x43e0 [ 1563.395598][ C0] ? preempt_schedule_common+0x7f/0xd0 [ 1563.395623][ C0] ? __pfx_copy_process+0x10/0x10 [ 1563.395646][ C0] ? wake_up_new_task+0x915/0xc60 [ 1563.395676][ C0] kernel_clone+0x2d7/0x940 [ 1563.395702][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1563.395722][ C0] ? rcu_is_watching+0x16/0xb0 [ 1563.395747][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1563.395778][ C0] ? __lock_acquire+0x747/0x2de0 [ 1563.395802][ C0] kernel_thread+0x13f/0x1b0 [ 1563.395829][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.395847][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 1563.395879][ C0] ? __pfx_kthread+0x10/0x10 [ 1563.395903][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1563.395932][ C0] kthreadd+0x4ec/0x6e0 [ 1563.395962][ C0] ? kthreadd+0x286/0x6e0 [ 1563.395988][ C0] ? __pfx_kthreadd+0x10/0x10 [ 1563.396017][ C0] ret_from_fork+0x514/0xb70 [ 1563.396036][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1563.396066][ C0] ? __switch_to+0xc89/0x1420 [ 1563.396095][ C0] ? __pfx_kthreadd+0x10/0x10 [ 1563.396123][ C0] ret_from_fork_asm+0x1a/0x30 [ 1563.396162][ C0]